CVE-2026-93165

CVE-2026-93165 is a memory overread in the Linux kernel's Chrome platform sensorhub driver (cros_ec_sensorhub). The root cause lies in max_response and sensor_num being sourced from different EC commands. With a malfunctioning EC firmware , the msg->insize can be clamped in cros_ec_cmd_xfer() ...