CyberRota Analysis
AI-GeneratedA vulnerability exists in the Linux kernel's USB Type-C protocol handling, where insufficient validation of device-controlled values in Discover Identity ACK handlers can lead to potential data leakage. This issue primarily affects systems utilizing USB Type-C connections and should be prioritized by organizations relying on Linux-based environments, particularly those handling sensitive data or operating in security-sensitive contexts. Immediate remediation is advised to mitigate the risk of unauthorized data exposure.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers Properly validate the count passed from a device when calling svdm_consume_identity() or svdm_consume_identity_sop_prime() as the device-controlled value could index off of the static arrays, which could leak data.