The vulnerability in the Linux kernel involves the USB Type-C alternate modes DisplayPort code where the kernel did not validate the count field before reading the Status Update VDO. This flaw allows a malicious or faulty device to specify an incorrect count, leading the kernel to read uninitialized stack memory and potentially disclose unintended data. The fix ensures that the count is properly validated before any data is read, preventing leakage of uninitialized kernel stack data.

The impact is an information disclosure where uninitialized kernel stack data could be leaked due to improper validation of the count field in the USB Type-C DisplayPort alternate mode status update. This could expose sensitive kernel memory contents to user space or external devices. No known exploits in the wild have been reported.

A fix has been applied in the Linux kernel to validate the count before reading the Status Update VDO, preventing this vulnerability. Users should update their Linux kernel to a version that includes this fix. Patch status is not explicitly confirmed in the provided data; therefore, check the official Linux kernel advisories or vendor updates for the exact fixed versions and apply them accordingly.