CVE-2026-93213

Summary

In the Linux kernel, the following vulnerability has been resolved:

of: fix out-of-bounds read in of_alias_scan() stem parser

The stem parser tests isdigit(*(end - 1)) before checking end > start and so reads one byte before the property name when the name is empty or all digits. Check the bound first.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux611cad720148c899db5a383c1c676fd820df7023 < fd0c7bbda81c0e0c1cb7b68d267b87371584f560affected
LinuxLinux611cad720148c899db5a383c1c676fd820df7023 < 958d7ee9fcf008ef9d2072c6410ee1bf6abf3b64affected
LinuxLinux611cad720148c899db5a383c1c676fd820df7023 < f7f6c3e32a31f2e1ed12075e8cd22b370a84e67aaffected
LinuxLinux611cad720148c899db5a383c1c676fd820df7023 < da7a80ddc610a19b0378016a4d816b9355f013a7affected
LinuxLinux611cad720148c899db5a383c1c676fd820df7023 < 96a9c984dd7c3589a2707a32b62802f98311dbfdaffected
LinuxLinux611cad720148c899db5a383c1c676fd820df7023 < 9253cfc5a85be1494ce56b4fc6f2d2b509440910affected
LinuxLinux611cad720148c899db5a383c1c676fd820df7023 < acd1b49043366f43e932308b4db7d3ce568eeadbaffected
LinuxLinux611cad720148c899db5a383c1c676fd820df7023 < 5bb01c657ff9fc807c2c592ca18af34c4fc3bc6faffected
LinuxLinux3.2affected
LinuxLinux0 < 3.2unaffected
LinuxLinux5.10.270 <= 5.10.*unaffected
LinuxLinux5.15.221 <= 5.15.*unaffected
LinuxLinux6.1.188 <= 6.1.*unaffected
LinuxLinux6.6.157 <= 6.6.*unaffected
LinuxLinux6.12.109 <= 6.12.*unaffected
LinuxLinux6.18.50 <= 6.18.*unaffected
LinuxLinux7.2.4 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References