7.8

CVE-2026-80649

firmware: arm_scmi: Fix OOB in scmi_power_name_get()

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Fix OOB in scmi_power_name_get()

scmi_power_name_get() does not validate the domain number passed by the
external caller, which may lead to an out-of-bounds access.

Fix this by returning "unknown" for invalid domains, like
scmi_reset_name_get() does.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 76a6550990e296a7acbb4d33201c9740be912a8c
Version < 01613f5e4ff6c080260615392338e92e261d109b
Status affected
Version 76a6550990e296a7acbb4d33201c9740be912a8c
Version < ca94597440fa546e56293abe9d0af6c73535d44e
Status affected
Version 76a6550990e296a7acbb4d33201c9740be912a8c
Version < 30aa348494531adfb043b2e883afc0439e5fcdca
Status affected
Version 76a6550990e296a7acbb4d33201c9740be912a8c
Version < 0db2bb3c948ef8b7364768554d6ab5e1544dc441
Status affected
Version 76a6550990e296a7acbb4d33201c9740be912a8c
Version < 11daac2817dca75e3eabb2050bc620c29e686fcd
Status affected
Version 76a6550990e296a7acbb4d33201c9740be912a8c
Version < 11bb771f3c55b4cef3879e69da4ddecd6085569c
Status affected
Version 76a6550990e296a7acbb4d33201c9740be912a8c
Version < f9ef3f66f4b18078e464b7606f9497e4dbeb9905
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.17
Status affected
Version 0
Version < 4.17
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.028
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/01613f5e4ff6c080260615392338e92e261d109b
https://git.kernel.org/stable/c/ca94597440fa546e56293abe9d0af6c73535d44e
https://git.kernel.org/stable/c/30aa348494531adfb043b2e883afc0439e5fcdca
https://git.kernel.org/stable/c/0db2bb3c948ef8b7364768554d6ab5e1544dc441
https://git.kernel.org/stable/c/11daac2817dca75e3eabb2050bc620c29e686fcd
https://git.kernel.org/stable/c/11bb771f3c55b4cef3879e69da4ddecd6085569c
https://git.kernel.org/stable/c/f9ef3f66f4b18078e464b7606f9497e4dbeb9905