Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-92478

scsi: ufs: core: Validate connected lane counts

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Validate connected lane counts The connected lane count is used by TX equalization code to index arrays sized by UFS_MAX_LANES. Reject zero and out-of-range RX or TX lane counts before they can be propagated.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 03e5d38e2f985d8d0b0a60508c0b422f664808e3 to < 4b62f73836f4d037c9afd20c4c6084e4d44b3a57affected
  • 03e5d38e2f985d8d0b0a60508c0b422f664808e3 to < 9e6dd452f1affb5c412ca64bf5809ce9fde3174daffected

Linux Linux

Default version status: affected

  • 7.1affected
  • 0 to < 7.1unaffected
  • 7.2.6 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References