CVE-2026-63960

A flaw was found in the Linux kernel's USB Type-C WCOVE driver. A malicious USB device could exploit a buffer overflow vulnerability in the wcove_read_rx_buffer() function. This flaw allows an attacker to write data beyond the intended buffer, potentially corrupting memory on the system's interrupt handling stack. The most significant consequence of this vulnerability is a denial of service (DoS), which could lead to system instability or crashes.