CVE-2026-64209

In the Linux kernel, the issue resides in phy: qcom: qmp-usbc, where swing_tbl and pre_emphasis_tbl (both 4x4, valid indices 0–3) may be accessed out of bounds due to a boundary check using > 4 instead of >= 4. This permits index 4 to slip through, causing an out-of-bounds read/write as des...

EUVD-2026-48617

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config swingtbl and preemphasistbl are 4x4 arrays valid indices 0-3, but the boundary check uses " 4" instead of "= 4", allowing index 4 to cause an out-of-bounds...

PT-2026-64324

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config swing tbl and pre emphasis tbl are 4x4 arrays valid indices 0-3, but the boundary check uses " 4" instead of "= 4", allowing index 4 to cause an out-of-bounds...