CVE-2026-64463

A flaw was found in the Linux kernel's USB Type-C subsystem, specifically within the tcpci_rt1711h driver. When a USB Type-C port is initialized, the system may fail to properly unregister the port if certain setup steps do not complete successfully. This oversight in resource management could lead to system instability or a denial of service (DoS), where legitimate users are unable to access system resources.

This vulnerability is rated as Moderate because exploitation requires specific hardware—a Richtek RT1711H Type-C controller—and local access or a failing device initialization sequence, constraining the blast radius to a localized denial of service. The incomplete cleanup occurs only during probe failures when interrupt registration fails, preventing arbitrary code execution. Consequently, standard Red Hat Enterprise Linux server and cloud deployments lacking this specialized controller hardware are not exposed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.