software node: Fix software_node_get_reference_args() with index -1
Summary
| CVE | CVE-2026-93046 |
|---|
| State | PUBLISHED |
|---|
| Assigner | Linux |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2026-09-17 17:17:57 UTC |
|---|
| Updated | 2026-09-17 17:17:57 UTC |
|---|
| Description | In the Linux kernel, the following vulnerability has been resolved:
software node: Fix software_node_get_reference_args() with index -1
The bounds check for the index passed to
software_node_get_reference_args() was failing when passed UINT_MAX,
this in turn would lead to an out of bound access in the property
array. Fix the bound check to also cover the UINT_MAX case. |
|---|
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|
| CNA |
Linux |
Linux |
affected 142acd739eb6f08c148a96ae8309256f1422ff4b 6cde06887487b4febd14658c9a246616abcc0097 git |
Not specified |
| CNA |
Linux |
Linux |
affected 56ce76e8d406cc72b89aee7931df5cf3f18db49d 0631384eadebc66d92d2dd72d57a0263c3877bee git |
Not specified |
| CNA |
Linux |
Linux |
affected 9324127b07dde8529222dc19233aa57ec810856c b2fa4e8c7e4a33e02e6aaa8f6df72f84cf4aed75 git |
Not specified |
| CNA |
Linux |
Linux |
affected f9397cf7bfb680799fb8c7f717c8f756384c3280 4ebf96d5f834aba7f6d0397db4c421f6078171b9 git |
Not specified |
| CNA |
Linux |
Linux |
affected 4b3383110b6df48e0ba5936af2cb68d5eb6bd43b 849076df15129e47dd8db751fa18489419ffea56 git |
Not specified |
| CNA |
Linux |
Linux |
affected 31e4e12e0e9609850cefd4b2e1adf782f56337d6 df5466412b362db7adfa78e3e092fe07ac6769a4 git |
Not specified |
| CNA |
Linux |
Linux |
affected 31e4e12e0e9609850cefd4b2e1adf782f56337d6 231bbc04c58f115a505bf3b668ec69ef40a1773b git |
Not specified |
| CNA |
Linux |
Linux |
affected 31e4e12e0e9609850cefd4b2e1adf782f56337d6 ba3dedcf3bd47017307595a7e54924198f018246 git |
Not specified |
| CNA |
Linux |
Linux |
affected 7af18e42bdefe1dba5bcb32555a4d524fd504939 git |
Not specified |
| CNA |
Linux |
Linux |
affected 5.10.239 5.10.270 semver |
Not specified |
| CNA |
Linux |
Linux |
affected 5.15.186 5.15.221 semver |
Not specified |
| CNA |
Linux |
Linux |
affected 6.1.142 6.1.188 semver |
Not specified |
| CNA |
Linux |
Linux |
affected 6.6.95 6.6.157 semver |
Not specified |
| CNA |
Linux |
Linux |
affected 6.12.35 6.12.110 semver |
Not specified |
| CNA |
Linux |
Linux |
affected 6.15.4 6.16 semver |
Not specified |
| CNA |
Linux |
Linux |
affected 6.16 |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.16 semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 5.10.270 5.10.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 5.15.221 5.15.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.1.188 6.1.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.6.157 6.6.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.12.110 6.12.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.18.52 6.18.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 7.2.6 7.2.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 7.3-rc1 * original_commit_for_fix |
Not specified |
References
| Reference | Source | Link | Tags |
|---|
| git.kernel.org/stable/c/6cde06887487b4febd14658c9a246616abcc0097 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/849076df15129e47dd8db751fa18489419ffea56 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/0631384eadebc66d92d2dd72d57a0263c3877bee |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/ba3dedcf3bd47017307595a7e54924198f018246 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/4ebf96d5f834aba7f6d0397db4c421f6078171b9 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/df5466412b362db7adfa78e3e092fe07ac6769a4 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/b2fa4e8c7e4a33e02e6aaa8f6df72f84cf4aed75 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/231bbc04c58f115a505bf3b668ec69ef40a1773b |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.