Live › vulnerability › CVE-2026-98893
Go to dashboardThe Linux kernel's ARM SCMI firmware driver parsed SENSOR_UPDATE notifications without checking that the payload held all the sensor readings the description promised. A truncated notification could make the kernel read beyond the received buffer.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_scmi: Validate SENSOR_UPDATE payload size
SENSOR_UPDATE carries one or more sensor readings after the fixed notification header. The parser derives the expected reading count from the sensor description, but it did not verify that the received payload contains those entries before parsing them.
Reject truncated update notifications before reading the variable array.
This page as .md · .json · in your agent: get_signal("CVE-2026-98893")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.