Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98892

firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size BASE_ERROR_EVENT carries a variable number of message reports, with the count encoded in error_status. The notification parser used that count without checking whether the received payload contained all reported entries. Reject truncated payloads before copying the report array.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 585dfab3fb80e67b3a54790b3d5ef2991feb3950 to < 4a754704698017ced0b657c92b468035faad00edaffected
  • 585dfab3fb80e67b3a54790b3d5ef2991feb3950 to < 28d65a0a46435d48b96b6943c518095dff1602a1affected
  • 585dfab3fb80e67b3a54790b3d5ef2991feb3950 to < 890a9c3bf9dae90dcabded9d8e10c708a13779f7affected
  • 585dfab3fb80e67b3a54790b3d5ef2991feb3950 to < c0742f23ec13fb6f5e0cd884323467a6c127d3c2affected
  • 585dfab3fb80e67b3a54790b3d5ef2991feb3950 to < bd8bc95ef2daa3bac56197cffcbf2d4c5ed42216affected
  • 585dfab3fb80e67b3a54790b3d5ef2991feb3950 to < cb77a50d1114c0c9e084176301a8e094d383edfaaffected
  • 585dfab3fb80e67b3a54790b3d5ef2991feb3950 to < 56e7e64cdd0e7209a58c8ec66028d63387402919affected

Linux Linux

Default version status: affected

  • 5.9affected
  • 0 to < 5.9unaffected
  • 5.10.271 to ≤ 5.10.*unaffected
  • 5.15.222 to ≤ 5.15.*unaffected
  • 6.1.189 to ≤ 6.1.*unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2 to ≤ *unaffected

References