Answer in brief
CVE-2026-90025 records a High severity (CVSS 7.7) vulnerability in usb: typec: ucsi: displayport: Fix OOB altmode array index. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.7. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=af8622f6a585d8d82b11cd7987e082861fd0edd3 <8fde7e4a366184e9a6aa95541e52933a73c00a74 || >=af8622f6a585d8d82b11cd7987e082861fd0edd3 <83f1abd62cc134700ba92e1e2dc650a49a185497 || >=af8622f6a585d8d82b11cd7987e082861fd0edd3 <1ffed96ef986e2cdf986aa4a4506a5e6dcdf4456 || >=af8622f6a585d8d82b11cd7987e082861fd0edd3 <58e0ee293ec5e06cacbe3953ad44042f1473dae9 || >=af8622f6a585d8d82b11cd7987e082861fd0edd3 <ac9f878c468052af6571e8639ab1c3ae040b908f || >=af8622f6a585d8d82b11cd7987e082861fd0edd3 <33a81acd2d1d0667d4eff93cb90339fa53e617e8 || >=af8622f6a585d8d82b11cd7987e082861fd0edd3 <bdaaf3074aedce8f1b173cc363d61cff5f6a585f || >=af8622f6a585d8d82b11cd7987e082861fd0edd3 <04cec690b1fd9d1c4c314b91a10d8c68a3acfe18 | 8fde7e4a366184e9a6aa95541e52933a73c00a74, 83f1abd62cc134700ba92e1e2dc650a49a185497, 1ffed96ef986e2cdf986aa4a4506a5e6dcdf4456, 58e0ee293ec5e06cacbe3953ad44042f1473dae9, ac9f878c468052af6571e8639ab1c3ae040b908f, 33a81acd2d1d0667d4eff93cb90339fa53e617e8, bdaaf3074aedce8f1b173cc363d61cff5f6a585f, 04cec690b1fd9d1c4c314b91a10d8c68a3acfe18 |
| Linux/Linuxgeneric | 5.2 | Not reported |
Published upstream
Sep 16, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 19, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 16, 2026
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix OOB altmode array index The UCSI displayport driver indexes the connector's port altmode array with the GET_CURRENT_CAM response after checking it is not 0xff. The port altmode array is UCSI_MAX_ALTMODES elements long. If the PPM returns an invalid GET_CURRENT_CAM response above UCSI_MAX_ALTMODES and not equal to 0xff, the kernel may crash with an array index OOB error. Update the UCSI displayport driver to verify the current cam is less than UCSI_MAX_ALTMODES before accessing the port altmode array.
Quoted source text, attributed separately from HOL analysis.