An uninitialized variable, typec_partner_desc, was passed to typec_register_partner with only a subset of its fields set. Because the remaining fields remain unset, garbage function pointers can be stored in the partner structure. When a USB device is linked, these pointers may be invoked, allowing an attacker to execute arbitrary code. Moreover, uninitialized pd_revision and usb_capability fields expose stack data via partner sysfs entries, leaking sensitive information. The use of these uninitialized fields is a classic instance of uninitialized variable use that can be exploited for code execution and information disclosure.

The flaw affects the Linux kernel’s USB type‑C driver (tipd). No specific kernel version numbers are listed, but the issue exists in any version prior to the merge of the described patch, impacting all Linux installations that load the affected type‑C driver.

The vulnerability permits arbitrary code execution with kernel privileges when a malicious USB Type‑C device is connected. The CVSS score of 6.1 indicates a moderate severity, while the EPSS score of <1% reflects a low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is a local attacker who can supply a crafted USB device, making the flaw exploitable on systems that permit USB Type‑C connectivity without user interaction. Countermeasures such as kernel patching are required to mitigate the risk.