CVE-2026-53028: usb: typec: Fix error pointer dereference
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: Fix error pointer dereference
The variable tps->partner is checked for an error pointer and then if it is, it sends an error message but does not return and then immediately dereferenced a few lines below:
tps->partner = typecregisterpartner(tps->port, &desc); if (ISERR(tps->partner)) devwarn(tps->dev, "%s: failed to register partnet\n", func);
if (desc.identity) { typecpartnersetidentity(tps->partner); cd321x->curpartneridentity = st.partneridentity; }
Add early return and fix spelling mistake in error message.
Detected by Smatch: drivers/usb/typec/tipd/core.c:827 cd321xupdatework() error: 'tps->partner' dereferencing possible ERRPTR()
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53028?
The severity of CVE-2026-53028 is classified as risk 27.
How do I fix CVE-2026-53028?
To fix CVE-2026-53028, update your Linux kernel to the latest version that addresses this vulnerability.
What is the impact of CVE-2026-53028 on Linux systems?
CVE-2026-53028 can lead to a possible error pointer dereference, which may result in system instability or crashes.
Which versions of the Linux kernel are affected by CVE-2026-53028?
CVE-2026-53028 affects specific versions of the Linux kernel prior to the fix introduced in the latest updates.
Where can I find more information about CVE-2026-53028?
More information about CVE-2026-53028 can be found in the official Linux kernel changelogs and security advisories.