CVE-2026-90025

Last refreshed2026-10-19

Status: UPDATED | Advisory ID: CVE-2026-90025

Key Details

CVE	CVE-2026-90025
CVSS Score / Version	7.7 (High) / CVSS v3.1
Updated	2026-10-19
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is none; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: ucsi: displayport: Fix OOB altmode array index

The UCSI displayport driver indexes the connector's port altmode array

with the GET_CURRENT_CAM response after checking it is not 0xff. The

port altmode array is UCSI_MAX_ALTMODES elements long. If the PPM

returns an invalid GET_CURRENT_CAM response above UCSI_MAX_ALTMODES and

not equal to 0xff, the kernel may crash with an array index OOB error.

Update the UCSI displayport driver to verify the current cam is less

than UCSI_MAX_ALTMODES before accessing the port altmode array. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-90025
CVE	https://www.cve.org/CVERecord?id=CVE-2026-90025

Source

Reference

NVD

CVE