CVE-2026-92478
scsi: ufs: core: Validate connected lane counts
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 7.2.6
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Validate connected lane counts The connected lane count is used by TX equalization code to index arrays sized by UFS_MAX_LANES. Reject zero and out-of-range RX or TX lane counts before they can be propagated.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 03e5d38e2f985d8d0b0a60508c0b422f664808e3 · fixed in 4b62f73836f4d037c9afd20c4c6084e4d44b3a57; From 03e5d38e2f985d8d0b0a60508c0b422f664808e3 · fixed in 9e6dd452f1affb5c412ca64bf5809ce9fde3174d
- Linux Linux
7.1
- KernelLinux
From 7.1.0 · fixed in 7.2.6