vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-93213

of: fix out-of-bounds read in of_alias_scan() stem parser

N/A
Published: September 24, 2026 at 03:10 PM UTC
Updated: October 19, 2026 at 10:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: of: fix out-of-bounds read in of_alias_scan() stem parser The stem parser tests isdigit(*(end - 1)) before checking end > start and so reads one byte before the property name when the name is empty or all digits. Check the bound first.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
3.2611cad720148c899db5a383c1c676fd820df7023
Vendor states this is fixed in 5bb01c657ff9fc807c2c592ca18af34c4fc3bc6f (fixed)
Vendor states this is fixed in 9253cfc5a85be1494ce56b4fc6f2d2b509440910 (fixed)
Vendor states this is fixed in 958d7ee9fcf008ef9d2072c6410ee1bf6abf3b64 (fixed)
Vendor states this is fixed in 96a9c984dd7c3589a2707a32b62802f98311dbfd (fixed)
Vendor states this is fixed in acd1b49043366f43e932308b4db7d3ce568eeadb (fixed)
Vendor states this is fixed in da7a80ddc610a19b0378016a4d816b9355f013a7 (fixed)
Vendor states this is fixed in f7f6c3e32a31f2e1ed12075e8cd22b370a84e67a (fixed)
Vendor states this is fixed in fd0c7bbda81c0e0c1cb7b68d267b87371584f560 (fixed)
Vendor states this is fixed in 3.2 (unaffected)
Vendor states this is fixed in 5.10.270 (unaffected)
Vendor states this is fixed in 5.15.221 (unaffected)
Vendor states this is fixed in 6.1.188 (unaffected)
Vendor states this is fixed in 6.12.109 (unaffected)
Vendor states this is fixed in 6.18.50 (unaffected)
Vendor states this is fixed in 6.6.157 (unaffected)
Vendor states this is fixed in 7.2.4 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/fd0c7bbda81c0e0c1cb7b68d267b87371584f560
Source: cverecord
https://git.kernel.org/stable/c/958d7ee9fcf008ef9d2072c6410ee1bf6abf3b64
Source: cverecord
https://git.kernel.org/stable/c/f7f6c3e32a31f2e1ed12075e8cd22b370a84e67a
Source: cverecord
https://git.kernel.org/stable/c/da7a80ddc610a19b0378016a4d816b9355f013a7
Source: cverecord
https://git.kernel.org/stable/c/96a9c984dd7c3589a2707a32b62802f98311dbfd
Source: cverecord
https://git.kernel.org/stable/c/9253cfc5a85be1494ce56b4fc6f2d2b509440910
Source: cverecord
https://git.kernel.org/stable/c/acd1b49043366f43e932308b4db7d3ce568eeadb
Source: cverecord
https://git.kernel.org/stable/c/5bb01c657ff9fc807c2c592ca18af34c4fc3bc6f

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card