235 matches found
CVE-2026-98892
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Validate BASEERROREVENT payload size BASEERROREVENT carries a variable number of message reports, with the count encoded in errorstatus. The notification parser used that count without checking whether the...
SUSE CVE-2026-98893
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Validate SENSORUPDATE payload size SENSORUPDATE carries one or more sensor readings after the fixed notification header. The parser derives the expected reading count from the sensor description, but it did not...
DEBIAN-CVE-2026-98892
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Validate BASEERROREVENT payload size BASEERROREVENT carries a variable number of message reports, with the count encoded in errorstatus. The notification parser used that count without checking whether the...
DEBIAN-CVE-2026-98893
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Validate SENSORUPDATE payload size SENSORUPDATE carries one or more sensor readings after the fixed notification header. The parser derives the expected reading count from the sensor description, but it did not...
CVE-2026-98893
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Validate SENSORUPDATE payload size SENSORUPDATE carries one or more sensor readings after the fixed notification header. The parser derives the expected reading count from the sensor description, but it did not...
CVE-2026-98892
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Validate BASEERROREVENT payload size BASEERROREVENT carries a variable number of message reports, with the count encoded in errorstatus. The notification parser used that count without checking whether the...
CVE-2026-98893 firmware: arm_scmi: Validate SENSOR_UPDATE payload size
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Validate SENSORUPDATE payload size SENSORUPDATE carries one or more sensor readings after the fixed notification header. The parser derives the expected reading count from the sensor description, but it did not...
EUVD-2026-108687
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Validate SENSORUPDATE payload size SENSORUPDATE carries one or more sensor readings after the fixed notification header. The parser derives the expected reading count from the sensor description, but it did not...
CVE-2026-98893 firmware: arm_scmi: Validate SENSOR_UPDATE payload size
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Validate SENSORUPDATE payload size SENSORUPDATE carries one or more sensor readings after the fixed notification header. The parser derives the expected reading count from the sensor description, but it did not...
CVE-2026-98893
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Validate SENSORUPDATE payload size SENSORUPDATE carries one or more sensor readings after the fixed notification header. The parser derives the expected reading count from the sensor description, but it did not...
CVE-2026-98893
The Linux kernel contains a vulnerability in the arm_scmi firmware component. The parser fails to verify that the received payload contains the required number of entries based on the sensor description before parsing them. This lack of validation for SENSOR_UPDATE payload sizes can lead to issue...
CVE-2026-98892
The Linux kernel contains a vulnerability in the arm_scmi firmware component. The BASE_ERROR_EVENT carries a variable number of message reports, where the count is encoded in the error_status . The notification parser incorrectly used this count without verifying if the received payload contained...
EUVD-2026-108686
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Validate BASEERROREVENT payload size BASEERROREVENT carries a variable number of message reports, with the count encoded in errorstatus. The notification parser used that count without checking whether the...
CVE-2026-98892 firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Validate BASEERROREVENT payload size BASEERROREVENT carries a variable number of message reports, with the count encoded in errorstatus. The notification parser used that count without checking whether the...
CVE-2026-98892 firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Validate BASEERROREVENT payload size BASEERROREVENT carries a variable number of message reports, with the count encoded in errorstatus. The notification parser used that count without checking whether the...
CVE-2026-98892
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Validate BASEERROREVENT payload size BASEERROREVENT carries a variable number of message reports, with the count encoded in errorstatus. The notification parser used that count without checking whether the...
CVE-2026-93091
A flaw was found in the armscmi firmware component of the Linux kernel. A race condition exists during the teardown of notifications or on the probe error path. This can allow an attacker to trigger a use-after-free vulnerability, where the system attempts to access memory that has already been...
CVE-2026-93092
A flaw was found in the armscmi firmware component of the Linux kernel. A race condition can occur during the unregistration of device notifiers and the teardown of the activeprotocols IDR ID allocator. This timing issue could potentially lead to system instability or a denial of service DoS due ...
CVE-2026-93086
A flaw was found in the Linux kernel's armscmi firmware component. During the cleanup of transmit and receive channels, the scmicleanupchannels function performs an unsafe operation by removing entries from a kernel data structure IDR while it is being iterated. This can lead to an invalid iterat...
CVE-2026-93084
A flaw was found in the Linux kernel's armscmi firmware. When the SCMI bus notifier acquires a handle, but the device link cannot be properly established or a protocol driver probe fails, the SCMI instance's reference count may not be correctly released. This can lead to a resource leak...