1. Home
  2. Vulnerabilities
  3. CVE-2026-63961
0.0
NA
CVE-2026-63961
usb: typec: altmodes/displayport: validate count before reading Status Update VDO
Overview
Description

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: validate count before reading Status Update VDO A broken/malicious device can send the incorrect count for a status update VDO, which will cause the kernel to read uninitialized stack data and send it off elsewhere. Fix this up by correctly verifying the count for the update object.

Details
INFO

Published Date :

July 19, 2026, 4:17 p.m.

Last Modified :

July 30, 2026, 2:51 p.m.

Remotely Exploit :

No

Source :

416baaa9-dc9f-4396-8d5f-8c081fb06d67
Impact
Affected Products

The following products are affected by CVE-2026-63961 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Linux linux_kernel
: Total Affected Vendor : 1 | Products : 1
Solution
Validate status update VDO count to prevent reading uninitialized stack data.
  • Verify the count for status update VDO objects.
  • Apply kernel updates from the vendor.
  • Ensure proper validation of VDO data.
References
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2026-63961.

URL Resource
https://git.kernel.org/stable/c/64bd6ccc5799f8473d1f37d4d8f53093dfec5c02
https://git.kernel.org/stable/c/6ffdbcd7a02f3af8fff9b6519830369f574ed44c
https://git.kernel.org/stable/c/70e7045849e954e56dcbf441b6330e66bc996306
https://git.kernel.org/stable/c/74aabe9ea30fdfba924fce9594e6aa69a596a4bb
https://git.kernel.org/stable/c/77a759ec30bc5fb0dd9c867b711d0acfed6c7faa
https://git.kernel.org/stable/c/8a18f896e667df491331371b55d4ad644dc51d60
https://git.kernel.org/stable/c/b10eff5abe6aa2a5af10ed17bddff76e3b6e6b9b
https://git.kernel.org/stable/c/dd7118c010f324497c275e8fd7a35c9baaa2a00f
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-63961 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-63961 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2026-63961 vulnerability anywhere in the article.

Results are limited to the first 20 news articles due to potential performance issues.

The following table lists the changes that have been made to the CVE-2026-63961 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Jul. 20, 2026

    Action Type Old Value New Value
    Changed Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '74aabe9ea30fdfba924fce9594e6aa69a596a4bb', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': 'dd7118c010f324497c275e8fd7a35c9baaa2a00f', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '6ffdbcd7a02f3af8fff9b6519830369f574ed44c', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '70e7045849e954e56dcbf441b6330e66bc996306', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '64bd6ccc5799f8473d1f37d4d8f53093dfec5c02', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': 'b10eff5abe6aa2a5af10ed17bddff76e3b6e6b9b', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '77a759ec30bc5fb0dd9c867b711d0acfed6c7faa', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '8a18f896e667df491331371b55d4ad644dc51d60', 'versionType': 'git'}, {'status': 'affected', 'version': '0', 'lessThan': '5.10.259', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '5.15.210', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '6.1.176', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '6.6.143', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '6.12.93', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '6.18.35', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '7.0.12', 'versionType': 'semver'}], 'programFiles': ['drivers/usb/typec/altmodes/displayport.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'unaffected', 'version': '5.10.259', 'versionType': 'semver', 'lessThanOrEqual': '5.10.*'}, {'status': 'unaffected', 'version': '5.15.210', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.176', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.143', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.93', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.35', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.0.12', 'versionType': 'semver', 'lessThanOrEqual': '7.0.*'}, {'status': 'unaffected', 'version': '7.1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/usb/typec/altmodes/displayport.c'], 'defaultStatus': 'affected'}] [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '0e3bb7d6894d9b6e67d6382bb03a46a1dc989588', 'lessThan': '74aabe9ea30fdfba924fce9594e6aa69a596a4bb', 'versionType': 'git'}, {'status': 'affected', 'version': '0e3bb7d6894d9b6e67d6382bb03a46a1dc989588', 'lessThan': 'dd7118c010f324497c275e8fd7a35c9baaa2a00f', 'versionType': 'git'}, {'status': 'affected', 'version': '0e3bb7d6894d9b6e67d6382bb03a46a1dc989588', 'lessThan': '6ffdbcd7a02f3af8fff9b6519830369f574ed44c', 'versionType': 'git'}, {'status': 'affected', 'version': '0e3bb7d6894d9b6e67d6382bb03a46a1dc989588', 'lessThan': '70e7045849e954e56dcbf441b6330e66bc996306', 'versionType': 'git'}, {'status': 'affected', 'version': '0e3bb7d6894d9b6e67d6382bb03a46a1dc989588', 'lessThan': '64bd6ccc5799f8473d1f37d4d8f53093dfec5c02', 'versionType': 'git'}, {'status': 'affected', 'version': '0e3bb7d6894d9b6e67d6382bb03a46a1dc989588', 'lessThan': 'b10eff5abe6aa2a5af10ed17bddff76e3b6e6b9b', 'versionType': 'git'}, {'status': 'affected', 'version': '0e3bb7d6894d9b6e67d6382bb03a46a1dc989588', 'lessThan': '77a759ec30bc5fb0dd9c867b711d0acfed6c7faa', 'versionType': 'git'}, {'status': 'affected', 'version': '0e3bb7d6894d9b6e67d6382bb03a46a1dc989588', 'lessThan': '8a18f896e667df491331371b55d4ad644dc51d60', 'versionType': 'git'}], 'programFiles': ['drivers/usb/typec/altmodes/displayport.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '4.19'}, {'status': 'unaffected', 'version': '0', 'lessThan': '4.19', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.10.259', 'versionType': 'semver', 'lessThanOrEqual': '5.10.*'}, {'status': 'unaffected', 'version': '5.15.210', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.176', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.143', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.93', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.35', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.0.12', 'versionType': 'semver', 'lessThanOrEqual': '7.0.*'}, {'status': 'unaffected', 'version': '7.1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/usb/typec/altmodes/displayport.c'], 'defaultStatus': 'affected'}]
  • New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Jul. 19, 2026

    Action Type Old Value New Value
    Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '74aabe9ea30fdfba924fce9594e6aa69a596a4bb', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': 'dd7118c010f324497c275e8fd7a35c9baaa2a00f', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '6ffdbcd7a02f3af8fff9b6519830369f574ed44c', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '70e7045849e954e56dcbf441b6330e66bc996306', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '64bd6ccc5799f8473d1f37d4d8f53093dfec5c02', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': 'b10eff5abe6aa2a5af10ed17bddff76e3b6e6b9b', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '77a759ec30bc5fb0dd9c867b711d0acfed6c7faa', 'versionType': 'git'}, {'status': 'affected', 'version': '1da177e4c3f41524e886b7f1b8a0c1fc7321cac2', 'lessThan': '8a18f896e667df491331371b55d4ad644dc51d60', 'versionType': 'git'}, {'status': 'affected', 'version': '0', 'lessThan': '5.10.259', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '5.15.210', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '6.1.176', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '6.6.143', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '6.12.93', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '6.18.35', 'versionType': 'semver'}, {'status': 'affected', 'version': '0', 'lessThan': '7.0.12', 'versionType': 'semver'}], 'programFiles': ['drivers/usb/typec/altmodes/displayport.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'unaffected', 'version': '5.10.259', 'versionType': 'semver', 'lessThanOrEqual': '5.10.*'}, {'status': 'unaffected', 'version': '5.15.210', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.176', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.143', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.93', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.35', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.0.12', 'versionType': 'semver', 'lessThanOrEqual': '7.0.*'}, {'status': 'unaffected', 'version': '7.1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/usb/typec/altmodes/displayport.c'], 'defaultStatus': 'affected'}]
    Added Description In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: validate count before reading Status Update VDO A broken/malicious device can send the incorrect count for a status update VDO, which will cause the kernel to read uninitialized stack data and send it off elsewhere. Fix this up by correctly verifying the count for the update object.
    Added Reference https://git.kernel.org/stable/c/64bd6ccc5799f8473d1f37d4d8f53093dfec5c02
    Added Reference https://git.kernel.org/stable/c/6ffdbcd7a02f3af8fff9b6519830369f574ed44c
    Added Reference https://git.kernel.org/stable/c/70e7045849e954e56dcbf441b6330e66bc996306
    Added Reference https://git.kernel.org/stable/c/74aabe9ea30fdfba924fce9594e6aa69a596a4bb
    Added Reference https://git.kernel.org/stable/c/77a759ec30bc5fb0dd9c867b711d0acfed6c7faa
    Added Reference https://git.kernel.org/stable/c/8a18f896e667df491331371b55d4ad644dc51d60
    Added Reference https://git.kernel.org/stable/c/b10eff5abe6aa2a5af10ed17bddff76e3b6e6b9b
    Added Reference https://git.kernel.org/stable/c/dd7118c010f324497c275e8fd7a35c9baaa2a00f
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CVSS
Vulnerability Scoring Details
No CVSS metrics available for this vulnerability.