Improper handling of exceptional conditions in Linux kernel - CVE-2026-98761
Published: October 22, 2026
Vulnerability details
The vulnerability allows an attacker with physical access to system to leave a disconnected USB Type-C port supplying VBUS power.
The vulnerability exists due to improper handling of a failed fast role swap operation in the Linux kernel TCPM event handler when processing a fast role swap signal during cable disconnection. An attacker with physical access to system can cause a cable to signal a fast role swap to a capable port during disconnection to leave VBUS power sourcing enabled after the operation fails to start.
Affected software
SUSE Linux Micro
SUSE Linux Micro Extras
kernel-default
kernel-64kb
kernel-64kb-debugsource
kernel-64kb-devel
kernel-default-devel
kernel-syms
kernel-obs-build
kernel-obs-build-debugsource
kernel-default-debugsource
kernel-default-devel-debuginfo
How to mitigate CVE-2026-98761
kernel-default - update to 6.4.0-159998.55.1
kernel-64kb - update to 6.4.0-159998.55.1
kernel-64kb-debugsource - update to 6.4.0-159998.55.1
kernel-64kb-devel - update to 6.4.0-159998.55.1
kernel-default-devel - update to 6.4.0-159998.55.1
kernel-syms - update to 6.4.0-159998.55.1
kernel-obs-build - update to 6.4.0-159998.55.1
kernel-obs-build-debugsource - update to 6.4.0-159998.55.1
kernel-default-debugsource - update to 6.4.0-159998.55.1
kernel-default-devel-debuginfo - update to 6.4.0-159998.55.1
External References
- https://git.kernel.org/stable/c/184d842121e7d1fbc3a81895f36f72fa27444163
- https://git.kernel.org/stable/c/90156585765b29304f07b0e4a1c56a969876fcfc
- https://git.kernel.org/stable/c/ae8aae45a39fcf2c64813652fcb062eace220712
- https://git.kernel.org/stable/c/b2ed8643face247e513fad12e193378ba67a61a1
- https://git.kernel.org/stable/c/d6b0cce612636f79f2cf0652fce40a0cbff7f0ed