-

CVE-2026-98157

EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation

In the Linux kernel, the following vulnerability has been resolved:

EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation

The poll_msec sysfs store file uses simple_strtoul() which accepts an unsigned
long, but the target field (poll_msec) is unsigned int. On 64-bit systems,
a value > UINT_MAX is silently truncated when stored.

Fix the mismatch by using kstrtouint() instead. This rejects values larger
than UINT_MAX at parse time, making truncation impossible. Also add a check
for value < 1 to reject the 0-delay case, which would cause the poll work to
spin without delay and consume 100% CPU.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version e27e3dac651771fe3250f6305dee277bce29fc5d
Version < a60794ee3f453516ab3ed212ba0295ecf890bc8c
Status affected
Version e27e3dac651771fe3250f6305dee277bce29fc5d
Version < f856511058c8cb470d6c6c7ce908870adcdc7dc6
Status affected
Version e27e3dac651771fe3250f6305dee277bce29fc5d
Version < 656e2fe98ac452db4e5b8147d1f33b8c35b4ec4b
Status affected
Version e27e3dac651771fe3250f6305dee277bce29fc5d
Version < 541fc6f733b32463cf23277637bb07e2aaa00b53
Status affected
Version e27e3dac651771fe3250f6305dee277bce29fc5d
Version < ea01c061d839b520f385f112908de1c6e3391327
Status affected
Version e27e3dac651771fe3250f6305dee277bce29fc5d
Version < 528052af901d6e6bbfa0e52362a70a58a5dd1e43
Status affected
Version e27e3dac651771fe3250f6305dee277bce29fc5d
Version < 0e022ee4f8e0dc843ba4c80bb75408a7704279af
Status affected
Version e27e3dac651771fe3250f6305dee277bce29fc5d
Version < 66cc9dec919dd63d8e4b3d386f7aed3ae684e645
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.23
Status affected
Version 0
Version < 2.6.23
Status unaffected
Version <= 5.10.*
Version 5.10.271
Status unaffected
Version <= 5.15.*
Version 5.15.222
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= 7.2.*
Version 7.2.7
Status unaffected
Version <= *
Version 7.3-rc2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.041
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/ea01c061d839b520f385f112908de1c6e3391327
https://git.kernel.org/stable/c/528052af901d6e6bbfa0e52362a70a58a5dd1e43
https://git.kernel.org/stable/c/0e022ee4f8e0dc843ba4c80bb75408a7704279af
https://git.kernel.org/stable/c/66cc9dec919dd63d8e4b3d386f7aed3ae684e645
https://git.kernel.org/stable/c/541fc6f733b32463cf23277637bb07e2aaa00b53
https://git.kernel.org/stable/c/656e2fe98ac452db4e5b8147d1f33b8c35b4ec4b
https://git.kernel.org/stable/c/a60794ee3f453516ab3ed212ba0295ecf890bc8c
https://git.kernel.org/stable/c/f856511058c8cb470d6c6c7ce908870adcdc7dc6