Out-of-bounds read in Linux kernel - CVE-2026-93178
Published: September 18, 2026
Vulnerability identifier: #VU150823
CSH Severity: Low
CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-93178
CWE-ID: CWE-125
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to perform an out-of-bounds read.
The vulnerability exists due to an out-of-bounds read in the SMU7 powerplay voltage lookup handling when processing VBIOS-parsed voltage table entries containing out-of-range voltage indices. A local user can provide VBIOS-parsed table entries with out-of-range voltage indices to perform an out-of-bounds read.
Affected software
Linux kernel
How to mitigate CVE-2026-93178
Install security update from vendor's repository.
External References
- https://git.kernel.org/stable/c/1664327ce797e09e387dc10cbbaa5b8d76558d2c
- https://git.kernel.org/stable/c/3a8a05477cda6c8293e2b629495b42981dcaba32
- https://git.kernel.org/stable/c/6f08c001fa6e8212930d694540ae8d9d6d3fb58a
- https://git.kernel.org/stable/c/745297208d31222f916cc04da313cb737b997935
- https://git.kernel.org/stable/c/8a3db9f593b643904c6cc6d8a3f211c84ca6cf8a
- https://git.kernel.org/stable/c/ce0d8e72836c9d3710a160ad848b0f1d096075e3
- https://git.kernel.org/stable/c/d9ef085114d1e3c2c1f869c0bdb275a7b358ce8b
- https://git.kernel.org/stable/c/f925d317d84d401d642e537ea18ee12f67cb6983