CyberRota Analysis
AI-GeneratedA vulnerability in the Linux kernel's USB Type-C protocol handling allows a malicious or faulty port to send a CRC-valid frame with a header indicating more data objects than are actually present, leading to potential exposure of uninitialized stack memory. This could result in information leakage or unpredictable behavior in systems that rely on USB Type-C connections. Organizations using Linux systems with USB Type-C interfaces should prioritize addressing this issue to mitigate security risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT A broken/malicious port can transmit a CRC-valid frame whose header advertises up to seven data objects but whose body carries fewer than that. Check for this, and rightfully reject the message, instead of reading from uninitialized stack memory.