GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

FKIE_CVE-2026-93046

Vulnerability from fkie_nvd - Published: 2026-09-17 17:17 - Updated: 2026-09-17 17:17
Severity
Summary
In the Linux kernel, the following vulnerability has been resolved: software node: Fix software_node_get_reference_args() with index -1 The bounds check for the index passed to software_node_get_reference_args() was failing when passed UINT_MAX, this in turn would lead to an out of bound access in the property array. Fix the bound check to also cover the UINT_MAX case.
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/0631384eadebc66d92d2dd72d57a0263c3877bee
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/231bbc04c58f115a505bf3b668ec69ef40a1773b
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4ebf96d5f834aba7f6d0397db4c421f6078171b9
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6cde06887487b4febd14658c9a246616abcc0097
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/849076df15129e47dd8db751fa18489419ffea56
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b2fa4e8c7e4a33e02e6aaa8f6df72f84cf4aed75
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ba3dedcf3bd47017307595a7e54924198f018246
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/df5466412b362db7adfa78e3e092fe07ac6769a4
Impacted products
Vendor Product Version
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/base/swnode.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "6cde06887487b4febd14658c9a246616abcc0097",
              "status": "affected",
              "version": "142acd739eb6f08c148a96ae8309256f1422ff4b",
              "versionType": "git"
            },
            {
              "lessThan": "0631384eadebc66d92d2dd72d57a0263c3877bee",
              "status": "affected",
              "version": "56ce76e8d406cc72b89aee7931df5cf3f18db49d",
              "versionType": "git"
            },
            {
              "lessThan": "b2fa4e8c7e4a33e02e6aaa8f6df72f84cf4aed75",
              "status": "affected",
              "version": "9324127b07dde8529222dc19233aa57ec810856c",
              "versionType": "git"
            },
            {
              "lessThan": "4ebf96d5f834aba7f6d0397db4c421f6078171b9",
              "status": "affected",
              "version": "f9397cf7bfb680799fb8c7f717c8f756384c3280",
              "versionType": "git"
            },
            {
              "lessThan": "849076df15129e47dd8db751fa18489419ffea56",
              "status": "affected",
              "version": "4b3383110b6df48e0ba5936af2cb68d5eb6bd43b",
              "versionType": "git"
            },
            {
              "lessThan": "df5466412b362db7adfa78e3e092fe07ac6769a4",
              "status": "affected",
              "version": "31e4e12e0e9609850cefd4b2e1adf782f56337d6",
              "versionType": "git"
            },
            {
              "lessThan": "231bbc04c58f115a505bf3b668ec69ef40a1773b",
              "status": "affected",
              "version": "31e4e12e0e9609850cefd4b2e1adf782f56337d6",
              "versionType": "git"
            },
            {
              "lessThan": "ba3dedcf3bd47017307595a7e54924198f018246",
              "status": "affected",
              "version": "31e4e12e0e9609850cefd4b2e1adf782f56337d6",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7af18e42bdefe1dba5bcb32555a4d524fd504939",
              "versionType": "git"
            },
            {
              "lessThan": "5.10.270",
              "status": "affected",
              "version": "5.10.239",
              "versionType": "semver"
            },
            {
              "lessThan": "5.15.221",
              "status": "affected",
              "version": "5.15.186",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.188",
              "status": "affected",
              "version": "6.1.142",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.157",
              "status": "affected",
              "version": "6.6.95",
              "versionType": "semver"
            },
            {
              "lessThan": "6.12.110",
              "status": "affected",
              "version": "6.12.35",
              "versionType": "semver"
            },
            {
              "lessThan": "6.16",
              "status": "affected",
              "version": "6.15.4",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/base/swnode.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.16"
            },
            {
              "lessThan": "6.16",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.110",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.52",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoftware node: Fix software_node_get_reference_args() with index -1\n\nThe bounds check for the index passed to\nsoftware_node_get_reference_args() was failing when passed UINT_MAX,\nthis in turn would lead to an out of bound access in the property\narray. Fix the bound check to also cover the UINT_MAX case."
    }
  ],
  "id": "CVE-2026-93046",
  "lastModified": "2026-09-17T17:17:57.843",
  "metrics": {},
  "published": "2026-09-17T17:17:57.843",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/0631384eadebc66d92d2dd72d57a0263c3877bee"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/231bbc04c58f115a505bf3b668ec69ef40a1773b"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/4ebf96d5f834aba7f6d0397db4c421f6078171b9"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/6cde06887487b4febd14658c9a246616abcc0097"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/849076df15129e47dd8db751fa18489419ffea56"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/b2fa4e8c7e4a33e02e6aaa8f6df72f84cf4aed75"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/ba3dedcf3bd47017307595a7e54924198f018246"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/df5466412b362db7adfa78e3e092fe07ac6769a4"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Received"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.