Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-64209— phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config

AI Predicted 4.4 Difficulty: Moderate EPSS 0.15% · P5

Possible ATT&CK Techniques 1AI

T1203 · Exploitation for Client Execution

Affected Version Matrix 6

VendorProductVersion RangeStatus
LinuxLinux81791c45c8e0eaeba9a40927eecd082a8500f709< cb35af6e7f3d5628178b58c631e305b1def8edf7affected
81791c45c8e0eaeba9a40927eecd082a8500f709< ea17fc4d7dc2ba6459b1a318962960520201baf1affected
7.0affected
< 7.0unaffected
7.0.11≤ 7.0.*unaffected
7.1≤ *unaffected
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-64209

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config swing_tbl and pre_emphasis_tbl are 4x4 arrays (valid indices 0-3), but the boundary check uses "> 4" instead of ">= 4", allowing index 4 to cause an out-of-bounds access.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 81791c45c8e0eaeba9a40927eecd082a8500f709 ~ cb35af6e7f3d5628178b58c631e305b1def8edf7 -
LinuxLinux 7.0 -

II. Public POCs for CVE-2026-64209

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-64209

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-64209 (2)

Same Patch Batch · Linux · 2026-07-24 · 48 CVEs total

CVE-2026-642329.8 CRITICALblock: recompute nr_integrity_segments in blk_insert_cloned_request
CVE-2026-642169.8 CRITICALnetfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()
CVE-2026-642558.8 HIGHwifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers
CVE-2026-642478.4 HIGHKVM: x86: hyper-v: Bound the bank index when querying sparse banks
CVE-2026-642358.1 HIGHx86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines
CVE-2026-642238.1 HIGHwifi: mac80211: consume only present negotiated TTLM maps
CVE-2026-642267.8 HIGHsched_ext: Avoid UAF in scx_root_enable_workfn() init failure path
CVE-2026-642217.8 HIGHspi: ti-qspi: fix use-after-free after DMA setup failure
CVE-2026-642187.8 HIGHbatman-adv: bla: fix report_work leak on backbone_gw purge
CVE-2026-642517.8 HIGHpwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()
CVE-2026-642177.8 HIGHnetfs: Fix overrun check in netfs_extract_user_iter()
CVE-2026-642087.5 HIGHcrypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks
CVE-2026-642107.5 HIGHnet/mlx5e: xsk: Fix unlocked writing to ICOSQ
CVE-2026-642437.1 HIGHASoC: codecs: simple-mux: Fix enum control bounds check
CVE-2026-642197.0 HIGHdrm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_as
CVE-2026-642227.0 HIGHocteontx2-pf: avoid double free of pool->stack on AQ init failure
CVE-2026-64220device property: set fwnode->secondary to NULL in fwnode_init()
CVE-2026-64250LoongArch: Report dying CPU to RCU in stop_this_cpu()
CVE-2026-64249fpga: region: fix use-after-free in child_regions_with_firmware()
CVE-2026-64246power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init()

Showing top 20 of 48 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-64209

No comments yet

Leave a comment