In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()… (CVE-2026-98760)

The Linux kernel USB Type-C driver (tipd) had a vulnerability where the tps6598x_connect() function passed a stack-allocated typec_partner_desc structure to typec_register_partner() without fully initializing it. Specifically, only usb_pd, accessory, and identity fields were initialized, leaving attach, detach callbacks and other fields uninitialized. typec_register_partner() copied these uninitialized fields, which could result in garbage function pointers being stored and later invoked by typec_partner_link_device(), and stack data leakage through sysfs via uninitialized pd_revision and usb_capability fields. The fix involved zero-initializing the entire descriptor to ensure optional callbacks are NULL and other fields are zeroed.

Uninitialized function pointers could lead to undefined behavior if invoked, potentially causing system instability or crashes. Additionally, uninitialized fields leaking stack data through sysfs could expose sensitive kernel stack information. No known exploits in the wild have been reported.

A fix is available that zero-initializes the typec_partner_desc structure in the tps6598x_connect() function. Users should update their Linux kernel to a version that includes this patch. Since this is a kernel vulnerability, applying the official kernel update is the recommended remediation.