of: fix out-of-bounds read in of_alias_scan() stem parser
Summary
| CVE | CVE-2026-93213 |
|---|
| State | PUBLISHED |
|---|
| Assigner | Linux |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2026-09-24 16:17:16 UTC |
|---|
| Updated | 2026-09-24 16:17:16 UTC |
|---|
| Description | In the Linux kernel, the following vulnerability has been resolved:
of: fix out-of-bounds read in of_alias_scan() stem parser
The stem parser tests isdigit(*(end - 1)) before checking end > start
and so reads one byte before the property name when the name is empty
or all digits. Check the bound first. |
|---|
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|
| CNA |
Linux |
Linux |
affected 611cad720148c899db5a383c1c676fd820df7023 fd0c7bbda81c0e0c1cb7b68d267b87371584f560 git |
Not specified |
| CNA |
Linux |
Linux |
affected 611cad720148c899db5a383c1c676fd820df7023 958d7ee9fcf008ef9d2072c6410ee1bf6abf3b64 git |
Not specified |
| CNA |
Linux |
Linux |
affected 611cad720148c899db5a383c1c676fd820df7023 f7f6c3e32a31f2e1ed12075e8cd22b370a84e67a git |
Not specified |
| CNA |
Linux |
Linux |
affected 611cad720148c899db5a383c1c676fd820df7023 da7a80ddc610a19b0378016a4d816b9355f013a7 git |
Not specified |
| CNA |
Linux |
Linux |
affected 611cad720148c899db5a383c1c676fd820df7023 96a9c984dd7c3589a2707a32b62802f98311dbfd git |
Not specified |
| CNA |
Linux |
Linux |
affected 611cad720148c899db5a383c1c676fd820df7023 9253cfc5a85be1494ce56b4fc6f2d2b509440910 git |
Not specified |
| CNA |
Linux |
Linux |
affected 611cad720148c899db5a383c1c676fd820df7023 acd1b49043366f43e932308b4db7d3ce568eeadb git |
Not specified |
| CNA |
Linux |
Linux |
affected 611cad720148c899db5a383c1c676fd820df7023 5bb01c657ff9fc807c2c592ca18af34c4fc3bc6f git |
Not specified |
| CNA |
Linux |
Linux |
affected 3.2 |
Not specified |
| CNA |
Linux |
Linux |
unaffected 3.2 semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 5.10.270 5.10.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 5.15.221 5.15.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.1.188 6.1.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.6.157 6.6.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.12.109 6.12.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.18.50 6.18.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 7.2.4 7.2.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 7.3-rc1 * original_commit_for_fix |
Not specified |
References
| Reference | Source | Link | Tags |
|---|
| git.kernel.org/stable/c/fd0c7bbda81c0e0c1cb7b68d267b87371584f560 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/acd1b49043366f43e932308b4db7d3ce568eeadb |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/9253cfc5a85be1494ce56b4fc6f2d2b509440910 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/958d7ee9fcf008ef9d2072c6410ee1bf6abf3b64 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/da7a80ddc610a19b0378016a4d816b9355f013a7 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/5bb01c657ff9fc807c2c592ca18af34c4fc3bc6f |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/96a9c984dd7c3589a2707a32b62802f98311dbfd |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/f7f6c3e32a31f2e1ed12075e8cd22b370a84e67a |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.