CVE-2026-63960

A buffer overflow vulnerability exists in the Linux kernel within the usb: typec: wcove driver. The function wcove_read_rx_buffer() fails to properly bound memory writes when copying PD RX FIFO data into a struct pd_message. Specifically, the USBC_RXINFO_RXBYTES() field is a 5-bit value (allowing...