In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: recover after failure to start the frs ams Reset the port if… (CVE-2026-98761)

The vulnerability in the Linux kernel USB Type-C TCPM driver involved improper handling when the FAST_ROLE_SWAP AMS failed to start. Specifically, if the TCPM failed to start the FRS AMS due to an open CC line (e.g., cable disconnect), the port state was set to INVALID_STATE without resetting the port, leaving VBUS power sourced erroneously. The fix introduces port reset and error recovery procedures to properly disable VBUS and reset the port state, preventing unintended power sourcing after such failures.

If unpatched, the vulnerability could cause the USB Type-C port to continue sourcing VBUS power incorrectly after a failed FAST_ROLE_SWAP AMS start, potentially leading to power management issues or hardware damage in some scenarios. However, no active exploits or widespread attacks are known. The impact is limited to USB Type-C ports on affected Linux kernel versions handling FRS AMS.

A fix has been implemented in the Linux kernel to reset the port and initiate error recovery when the TCPM fails to start the FAST_ROLE_SWAP AMS. Users should update to the fixed Linux kernel version containing this patch. No additional mitigation is required beyond applying the official kernel update.