Search/CVE-2025-71108
● CVE — Medium

CVE-2025-71108

VendorlinuxProductlinux kernelDiscoveredJan 14, 2026UpdatedMar 25, 2026

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Handle incorrect num_connectors capability The UCSI spec states that the num_connectors field is 7 bits, and the 8th bit is reserved and should be set to zero. Some buggy FW has been known to set this bit, and it can lead to a system not booting. Flag that the FW is not behaving correctly, and auto-fix the value so that the system boots correctly. Found on Lenovo P1 G8 during Linux enablement program. The FW will be fixed, but seemed worth addressing in case it hit platforms that aren't officially Linux supported.

CVSS v3.1
5.5 MEDIUM
EPSS
0.15%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
25
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
▲ 0.02pp
0.13% → 0.15% over 4 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Connections
26 relationships
Timeline
disclosure → media coverage
Jan 14, 2026
Disclosure — published as a CVE record. · last revised by NVD Mar 25, 2026
Mar 16, 2026
ubuntu.com reports: USN-8096-1: Linux kernel vulnerabilities
Mar 16, 2026
ubuntu.com reports: USN-8096-2: Linux kernel (FIPS) vulnerabilities
Mar 17, 2026
ubuntu.com reports: USN-8096-3: Linux kernel vulnerabilities
Mar 17, 2026
ubuntu.com reports: USN-8096-4: Linux kernel (Real-time) vulnerabilities
Mar 23, 2026
ubuntu.com reports: USN-8116-1: Linux kernel (Intel IoTG Real-time) vulnerabilities
Mar 23, 2026
ubuntu.com reports: USN-8096-5: Linux kernel (NVIDIA Tegra IGX) vulnerabilities
Apr 1, 2026
ubuntu.com reports: USN-8141-1: Linux kernel (Raspberry Pi) vulnerabilities
Apr 9, 2026
ubuntu.com reports: USN-8163-1: Linux kernel (Azure FIPS) vulnerabilities
Apr 13, 2026
ubuntu.com reports: USN-8163-2: Linux kernel (Azure) vulnerabilities
Apr 16, 2026
ubuntu.com reports: USN-8177-1: Linux kernel vulnerabilities
Apr 16, 2026
ubuntu.com reports: USN-8179-1: Linux kernel vulnerabilities
Apr 17, 2026
ubuntu.com reports: USN-8177-2: Linux kernel (Real-time) vulnerabilities
Apr 17, 2026
ubuntu.com reports: USN-8183-1: Linux kernel (GCP) vulnerabilities
Apr 17, 2026
ubuntu.com reports: USN-8184-1: Linux kernel (Real-time) vulnerabilities
Apr 17, 2026
ubuntu.com reports: USN-8179-2: Linux kernel (FIPS) vulnerabilities
Apr 17, 2026
ubuntu.com reports: USN-8185-1: Linux kernel (NVIDIA) vulnerabilities
Apr 28, 2026
ubuntu.com reports: USN-8185-2: Linux kernel (Low Latency NVIDIA) vulnerabilities
May 7, 2026
ubuntu.com reports: USN-8179-4: Linux kernel (GCP) vulnerabilities
May 7, 2026
ubuntu.com reports: USN-8243-1: Linux kernel (Azure) vulnerabilities
May 7, 2026
ubuntu.com reports: USN-8245-1: Linux kernel vulnerabilities
May 7, 2026
ubuntu.com reports: USN-8257-1: Linux kernel (Raspberry Pi) vulnerabilities
May 7, 2026
ubuntu.com reports: USN-8258-1: Linux kernel (Azure) vulnerabilities
May 7, 2026
ubuntu.com reports: USN-8260-1: Linux kernel (Azure FIPS) vulnerabilities
May 7, 2026
ubuntu.com reports: USN-8261-1: Linux kernel (Xilinx) vulnerabilities
May 11, 2026
ubuntu.com reports: USN-8265-1: Linux kernel (NVIDIA Tegra) vulnerabilities