CVE-2026-53028

usb: typec: Fix error pointer dereference

published June 24, 2026

CVSS
—
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: Fix error pointer dereference

The variable tps->partner is checked for an error pointer and then if it

is, it sends an error message but does not return and then immediately

dereferenced a few lines below:

tps->partner = typec_register_partner(tps->port, &desc);

if (IS_ERR(tps->partner))

dev_warn(tps->dev, "%s: failed to register partnet\n", __func__);

if (desc.identity) {

typec_partner_set_identity(tps->partner);

cd321x->cur_partner_identity = st.partner_identity;

}

Add early return and fix spelling mistake in error message.

Detected by Smatch:

drivers/usb/typec/tipd/core.c:827 cd321x_update_work() error:

'tps->partner' dereferencing possible ERR_PTR()

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.8th percentile
Published
2026-06-24T16:29Z
EPSS history
Timeline
  • 24 JUN 16:29Z
    usb: typec: Fix error pointer dereference
    cvelistv5