CyberRota Analysis
AI-GeneratedA vulnerability in the Linux kernel allows a malicious or faulty USB Type-C device to send an incorrect count for a status update VDO, leading to the potential exposure of uninitialized stack data. This could result in information leakage or unpredictable behavior in systems utilizing affected USB Type-C connections. Organizations using Linux systems with USB Type-C interfaces should prioritize applying the fix to mitigate these risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: validate count before reading Status Update VDO A broken/malicious device can send the incorrect count for a status update VDO, which will cause the kernel to read uninitialized stack data and send it off elsewhere. Fix this up by correctly verifying the count for the update object.