CVE-2026-64209

kernel: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 24, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel, specifically within the Qualcomm (QCOM) QMP USBC PHY (Physical Layer) driver. An incorrect boundary check during the configuration of DisplayPort (DP) swing settings allows for an out-of-bounds array access. This vulnerability can lead to memory corruption, potentially impacting system stability or allowing for further exploitation.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-787 · Out-of-bounds Write