Out-of-Bounds Array Access in Linux Kernel UCSI DisplayPort Driver

CVE-2026-90025

What is CVE-2026-90025?

A vulnerability exists in the UCSI DisplayPort driver of the Linux kernel, where improper validation of the GET_CURRENT_CAM response can lead to an out-of-bounds access in the port altmode array. If the response indicates an index above the maximum defined size (UCSI_MAX_ALTMODES), it can cause the kernel to crash, undermining system stability. Proper checks have been introduced to ensure the response is verified against the array bounds before accessing it, enhancing the driver's robustness against such issues.

References