ROS-20261009-73-0156

The vulnerability of the doflash function in the drivers/usb/typec/ucsi/ucsiccg.c driver for the UCSI USB Type-C interface in the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In the usb:typec:ucsi:ccg section, firmware images without a ‘:’ record header are rejected. The doflash function searches for the first .cyacd record using the following code: c p = strnchrfw-data, fw-size, ':'; while p eof s =...

The vulnerability of the do_flash() function in the drivers/usb/typec/ucsi/ucsi_ccg.c driver for the USB Type C port interface in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the doflash function in the drivers/usb/typec/ucsi/ucsiccg.c driver for the UCSI USB Type-C interface in the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-63964: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: reject firmware images without a ':' record header doflash locates the first .cyacd record with p = strnchrfw-data, fw-size, ':'; while p eof s = strnchrp + 1, eof - p - 1, ':'; ... If the firmware image...