The Linux kernel vulnerability CVE-2026-64463 affects the usb: typec: tcpci_rt1711h driver. The rt1711h_probe() function registers the TCPCI port before requesting interrupts and enabling alert interrupts. If these subsequent steps fail, the probe function returns without unregistering the TCPCI port, which is only explicitly unregistered in the remove callback. The fix adds a devres action immediately after tcpci_register_port() succeeds, ensuring tcpci_unregister_port() is called on probe failures and driver detach, and removes the redundant unregister call in the remove callback. This issue was found through static analysis of kernel code.

If the probe function fails after registering the TCPCI port but before completing interrupt setup, the port remains registered improperly. This could lead to resource leaks or inconsistent driver state. There is no indication of direct exploitation or impact beyond resource management issues.

A fix has been implemented in the Linux kernel source code to properly unregister the TCPCI port on probe failures and driver detach. Users should update to a kernel version that includes this fix once available. Patch status is not explicitly confirmed; check the vendor or Linux kernel advisories for the specific fixed versions and apply updates accordingly.