The Linux kernel contained a vulnerability in the USB Type-C TCPM code where the count value passed from a device during Discover Identity ACK handling was not properly validated. This count is used in calls to svdm_consume_identity() and svdm_consume_identity_sop_prime(). Because the device-controlled count could index beyond static arrays, it could result in leaking kernel data. The vulnerability has been resolved by adding proper validation of the VDO count to prevent out-of-bounds indexing.

Improper validation of device-controlled input could allow an attacker with USB Type-C device interaction to cause out-of-bounds access in kernel memory, potentially leaking sensitive data from the kernel space. There is no indication of code execution or privilege escalation from the provided data.

A fix has been implemented in the Linux kernel to properly validate the VDO count in the affected TCPM handlers. Users should apply the official kernel updates that include this patch. Since this is not a cloud service, remediation depends on applying the updated kernel version. Patch status is not explicitly confirmed in the provided data; check the Linux kernel vendor advisory for the exact fixed versions and update accordingly.