In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work()… (CVE-2026-98759)

The vulnerability in the Linux kernel's USB Type-C tipd driver involved the cd321x_update_work() function passing a partially initialized stack-allocated typec_partner_desc structure to typec_register_partner(). Since fields such as attach, detach callbacks, pd_revision, and usb_capability were left uninitialized, this could result in garbage function pointers being stored and later invoked, and leakage of stack data through sysfs. The fix involved zero-initializing the descriptor to ensure optional callbacks are NULL and other fields are zeroed, preventing use of uninitialized data.

If exploited, the vulnerability could cause the kernel to invoke arbitrary or garbage function pointers, potentially leading to kernel crashes or undefined behavior. Additionally, uninitialized fields could leak kernel stack data via sysfs, potentially exposing sensitive information. However, no known exploits are reported in the wild.

A fix has been implemented that zero-initializes the typec_partner_desc structure in the cd321x_update_work() function. Users should apply the official Linux kernel updates that include this patch to remediate the vulnerability. Since this is a kernel-level issue, updating to a fixed kernel version is the recommended mitigation.