---
id: CVE-2026-98759
title: >-
  kernel: usb: typec: tipd: fix uninitialized typec_partner_desc in
  cd321x_update_work() (CVE-2026-98759)
summary: >-
  A flaw was found in the Linux kernel's USB Type-C TI Power Delivery (tipd)
  driver. The driver fails to initialize memory for descriptor structures when
  handling partner device connections. An attacker connecting a USB device can
  cause the …
severity: medium
cvss: 6.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H'
cvssSource: vendor
cwe: CWE-824
vendor: Red Hat
product: Red Hat Enterprise Linux 9
affected:
  - enterprise_linux 10
  - enterprise_linux 9
published: '2026-10-18'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T05:21:44+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98759.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98759.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-98759'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2555135'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-98759'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-98759'
  - url: >-
      https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98759.mbox
  - url: 'https://git.kernel.org/stable/c/75dc6cb377efd2f4428b7f76d3a590a0bbc10399'
  - url: 'https://git.kernel.org/stable/c/5414144e202a32437e3eb436cd3f5f00d79ad86e'
  - url: 'https://git.kernel.org/stable/c/88c7e458af53ff781a3f1051708395892b325576'
tags:
  - csaf
  - vex
  - red-hat
  - cve.org
epss: 0.00206
epssPercentile: 0.10628
ingestedAt: '2026-10-18T16:47:32.497Z'
---

## Overview

A flaw was found in the Linux kernel's USB Type-C TI Power Delivery (tipd) driver. The driver fails to initialize memory for descriptor structures when handling partner device connections. An attacker connecting a USB device can cause the system to invoke uninitialized function pointers, leading to a kernel crash and a Denial of Service (DoS). In addition, uninitialized kernel stack data may be exposed through the system filesystem (sysfs), resulting in information disclosure to a local user.

## Vendor advisories

- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9 · updated 2026-10-23 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98759.json)

**kernel: usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work()** — rated Moderate by Red Hat. Released 2026-10-18, updated 2026-10-23.

Affected:

- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9

No fix planned:

- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9

Not affected:

- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat OpenShift Container Platform 4

## Remediation

Fix deferred