CVE-2026-64209: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config
Published Jul 24, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config
swingtbl and preemphasistbl are 4x4 arrays (valid indices 0-3), but the boundary check uses "> 4" instead of ">= 4", allowing index 4 to cause an out-of-bounds access.
Affected Software
6 affected components
Linux Linux kernel
Linux Linux kernel>=7.0<7.0.11
Linux Linux kernel=7.1-rc1
Linux Linux kernel=7.1-rc2
Linux Linux kernel=7.1-rc3
Linux Linux kernel=7.1-rc4
Remediation
Event History
Jul 24, 2026
CVE Published
via MITRE·03:23 PM
Data Sourced
via MITRE·03:23 PM
Description
Data Sourced
via NVD·04:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What level of access does an attacker need?
The CVSS vector indicates local attack access and low privileges are required. No user interaction is required.
2
What is the expected security impact if exploitation succeeds?
The reported CVSS metrics rate confidentiality and availability impact as high, while integrity impact is listed as none.
3
Does the available information confirm whether default kernel configurations are affected?
No. The provided information identifies the affected Linux kernel driver logic but does not state whether the vulnerable code is enabled or reachable in default configurations.