CVE-2026-90025
HIGH
Published Sep 16, 2026
Modified Sep 16, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix OOB altmode array index The UCSI displayport driver indexes the connector's port altmode array with the GET_CURRENT_CAM response after checking it is not 0xff. The port altmode array is UCSI_MAX_ALTMODES elements long. If the PPM returns an invalid GET_CURRENT_CAM response above UCSI_MAX_ALTMODES and not equal to 0xff, the kernel may crash with an array index OOB error. Update the UCSI displayport driver to verify the current cam is less than UCSI_MAX_ALTMODES before accessing the port altmode array.
Is your site exposed to CVE-2026-90025?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
7.7
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
References
Other References
https://git.kernel.org/stable/c/04cec690b1fd9d1c4c314b91a10d8c68a3acfe18
https://git.kernel.org/stable/c/1ffed96ef986e2cdf986aa4a4506a5e6dcdf4456
https://git.kernel.org/stable/c/33a81acd2d1d0667d4eff93cb90339fa53e617e8
https://git.kernel.org/stable/c/58e0ee293ec5e06cacbe3953ad44042f1473dae9
https://git.kernel.org/stable/c/83f1abd62cc134700ba92e1e2dc650a49a185497
https://git.kernel.org/stable/c/8fde7e4a366184e9a6aa95541e52933a73c00a74
https://git.kernel.org/stable/c/ac9f878c468052af6571e8639ab1c3ae040b908f
https://git.kernel.org/stable/c/bdaaf3074aedce8f1b173cc363d61cff5f6a585f
Frequently Asked Questions
What is CVE-2026-90025? +
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: ucsi: displayport: Fix OOB altmode array index
The UCSI displayport driver indexes the connector's port altmode array
with the GET_CURRENT_CAM response after checking it is not 0xff. The
port altmode array is UCSI_MAX_ALTMODES elements long. If the PPM
returns an invalid GET_CURRENT_CAM response above UCSI_MAX_ALTMODES and
not equal to 0xff, the kernel may crash with an array index OOB error.
Update the UCSI displayport driver to verify the current cam is less
than UCSI_MAX_ALTMODES before accessing the port altmode array. It has a CVSS v3.1 base score of 7.7 (HIGH).
How severe is CVE-2026-90025? +
CVE-2026-90025 has a CVSS v3.1 score of 7.7 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
How do I check if I'm vulnerable to CVE-2026-90025? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.