-

CVE-2026-93213

of: fix out-of-bounds read in of_alias_scan() stem parser

In the Linux kernel, the following vulnerability has been resolved:

of: fix out-of-bounds read in of_alias_scan() stem parser

The stem parser tests isdigit(*(end - 1)) before checking end > start
and so reads one byte before the property name when the name is empty
or all digits. Check the bound first.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 611cad720148c899db5a383c1c676fd820df7023
Version < fd0c7bbda81c0e0c1cb7b68d267b87371584f560
Status affected
Version 611cad720148c899db5a383c1c676fd820df7023
Version < 958d7ee9fcf008ef9d2072c6410ee1bf6abf3b64
Status affected
Version 611cad720148c899db5a383c1c676fd820df7023
Version < f7f6c3e32a31f2e1ed12075e8cd22b370a84e67a
Status affected
Version 611cad720148c899db5a383c1c676fd820df7023
Version < da7a80ddc610a19b0378016a4d816b9355f013a7
Status affected
Version 611cad720148c899db5a383c1c676fd820df7023
Version < 96a9c984dd7c3589a2707a32b62802f98311dbfd
Status affected
Version 611cad720148c899db5a383c1c676fd820df7023
Version < 9253cfc5a85be1494ce56b4fc6f2d2b509440910
Status affected
Version 611cad720148c899db5a383c1c676fd820df7023
Version < acd1b49043366f43e932308b4db7d3ce568eeadb
Status affected
Version 611cad720148c899db5a383c1c676fd820df7023
Version < 5bb01c657ff9fc807c2c592ca18af34c4fc3bc6f
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 3.2
Status affected
Version 0
Version < 3.2
Status unaffected
Version <= 5.10.*
Version 5.10.270
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.109
Status unaffected
Version <= 6.18.*
Version 6.18.50
Status unaffected
Version <= 7.2.*
Version 7.2.4
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.064
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/fd0c7bbda81c0e0c1cb7b68d267b87371584f560
https://git.kernel.org/stable/c/958d7ee9fcf008ef9d2072c6410ee1bf6abf3b64
https://git.kernel.org/stable/c/f7f6c3e32a31f2e1ed12075e8cd22b370a84e67a
https://git.kernel.org/stable/c/da7a80ddc610a19b0378016a4d816b9355f013a7
https://git.kernel.org/stable/c/96a9c984dd7c3589a2707a32b62802f98311dbfd
https://git.kernel.org/stable/c/9253cfc5a85be1494ce56b4fc6f2d2b509440910
https://git.kernel.org/stable/c/acd1b49043366f43e932308b4db7d3ce568eeadb
https://git.kernel.org/stable/c/5bb01c657ff9fc807c2c592ca18af34c4fc3bc6f