SUSE CVE-2026-93165

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: sensorhub: Fix memory overread in ring handler maxresponse and sensornum are read from different EC commands: - maxresponse is from crosecgetprotoinfo. ecdev-maxresponse = info-maxresponsepacketsize - sizeofstruc...

CVE-2026-93165

A memory overread in the Linux kernel's Chrome sensorhub driver (platform/chrome/sensorhub) occurs when a malfunctioning EC firmware causes msg->insize to be clamped in cros_ec_cmd_xfer() because it exceeds max_response. The resulting shorter-than-expected read causes a subsequent memcpy() in ...

CVE-2026-93165: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: sensorhub: Fix memory overread in ring handler maxresponse and sensornum are read from different EC commands: - maxresponse is from crosecgetprotoinfo. ecdev-maxresponse = info-maxresponsepacketsize - sizeofstruc...