CVE-2026-93067 drm/bridge: tc358767: clamp the reported AUX read size to the request

🗓️ 17 Sep 2026 16:10:52Reported by LinuxType

Stack buffer overrun in Linux kernel tc358767 when AUX_BYTES count exceeds the 16-byte buffer.

Reporter	Title	Published	Views	Family All 10
CVE	CVE-2026-93067	17 Sep 202616:10	–	cve
Debian CVE	CVE-2026-93067	17 Sep 202616:10	–	debiancve
EUVD	EUVD-2026-82177	17 Sep 202616:10	–	euvd
Microsoft CVE	drm/bridge: tc358767: clamp the reported AUX read size to the request	19 Sep 202608:22	–	mscve
NVD	CVE-2026-93067	17 Sep 202617:18	–	nvd
OSV	AZL-102731 CVE-2026-93067 affecting package kernel 6.6.150.1-1	17 Sep 202617:18	–	osv
OSV	BELL-CVE-2026-93067	19 Sep 202606:06	–	osv
OSV	DEBIAN-CVE-2026-93067	17 Sep 202617:18	–	osv
OSV	UBUNTU-CVE-2026-93067	18 Sep 202600:00	–	osv
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-93067	18 Sep 202600:00	–	nessus

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpu/drm/bridge/tc358767.c"
    ],
    "versions": [
      {
        "version": "12dfe7c4d9c53442efcb4113cff505f60d654906",
        "lessThan": "ebf00c51c9ac9188e2806a2b842418805ee879be",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "12dfe7c4d9c53442efcb4113cff505f60d654906",
        "lessThan": "424b762cc26d512e3e7421e57e41b4b55be2400b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "12dfe7c4d9c53442efcb4113cff505f60d654906",
        "lessThan": "dd6274706bec30d005bff0587a4262d01dc2775a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "12dfe7c4d9c53442efcb4113cff505f60d654906",
        "lessThan": "982caa744fce79d18f2920382aaeb0da821a6e73",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "12dfe7c4d9c53442efcb4113cff505f60d654906",
        "lessThan": "33c0b072e31dee98a754d9bd01800359dfeb9e8f",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "12dfe7c4d9c53442efcb4113cff505f60d654906",
        "lessThan": "57c567e0e8aa76f6e3e8f39d7f40c20bc37e76af",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "12dfe7c4d9c53442efcb4113cff505f60d654906",
        "lessThan": "9ff718df547372d70ca20ad8e66a3fb1300936b2",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "12dfe7c4d9c53442efcb4113cff505f60d654906",
        "lessThan": "ec6444a00c49e6c2b5e9a507272a28126677f9ee",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpu/drm/bridge/tc358767.c"
    ],
    "versions": [
      {
        "version": "5.4",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.4",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.270",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.221",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.188",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.157",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.110",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.52",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2.6",
        "lessThanOrEqual": "7.2.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.3-rc1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/33c0b072e31dee98a754d9bd01800359dfeb9e8f
git	www.git.kernel.org/stable/c/dd6274706bec30d005bff0587a4262d01dc2775a
git	www.git.kernel.org/stable/c/982caa744fce79d18f2920382aaeb0da821a6e73
git	www.git.kernel.org/stable/c/424b762cc26d512e3e7421e57e41b4b55be2400b
git	www.git.kernel.org/stable/c/57c567e0e8aa76f6e3e8f39d7f40c20bc37e76af
git	www.git.kernel.org/stable/c/9ff718df547372d70ca20ad8e66a3fb1300936b2
git	www.git.kernel.org/stable/c/ec6444a00c49e6c2b5e9a507272a28126677f9ee
git	www.git.kernel.org/stable/c/ebf00c51c9ac9188e2806a2b842418805ee879be

17 Sep 2026 16:10Current

EPSS0.00177