CVE-2026-93213
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: of: fix out-of-bounds read in of_alias_scan() stem parser The stem parser tests isdigit(*(end - 1)) before checking end > start and so reads one byte before the property name when the name is empty or all digits. Check the bound first.
Severity
Not scored
CVSS score
Not available
Vulnerability status
Received
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2026-09-24 16:17:16.257000
Last modified
2026-10-19 10:17:12.210000
View original CVE JSON
{
"id": "CVE-2026-93213",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2026-09-24T16:17:16.257",
"lastModified": "2026-10-19T10:17:12.210",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nof: fix out-of-bounds read in of_alias_scan() stem parser\n\nThe stem parser tests isdigit(*(end - 1)) before checking end > start\nand so reads one byte before the property name when the name is empty\nor all digits. Check the bound first."
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"drivers/of/base.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "611cad720148c899db5a383c1c676fd820df7023",
"lessThan": "fd0c7bbda81c0e0c1cb7b68d267b87371584f560",
"versionType": "git",
"status": "affected"
},
{
"version": "611cad720148c899db5a383c1c676fd820df7023",
"lessThan": "958d7ee9fcf008ef9d2072c6410ee1bf6abf3b64",
"versionType": "git",
"status": "affected"
},
{
"version": "611cad720148c899db5a383c1c676fd820df7023",
"lessThan": "f7f6c3e32a31f2e1ed12075e8cd22b370a84e67a",
"versionType": "git",
"status": "affected"
},
{
"version": "611cad720148c899db5a383c1c676fd820df7023",
"lessThan": "da7a80ddc610a19b0378016a4d816b9355f013a7",
"versionType": "git",
"status": "affected"
},
{
"version": "611cad720148c899db5a383c1c676fd820df7023",
"lessThan": "96a9c984dd7c3589a2707a32b62802f98311dbfd",
"versionType": "git",
"status": "affected"
},
{
"version": "611cad720148c899db5a383c1c676fd820df7023",
"lessThan": "9253cfc5a85be1494ce56b4fc6f2d2b509440910",
"versionType": "git",
"status": "affected"
},
{
"version": "611cad720148c899db5a383c1c676fd820df7023",
"lessThan": "acd1b49043366f43e932308b4db7d3ce568eeadb",
"versionType": "git",
"status": "affected"
},
{
"version": "611cad720148c899db5a383c1c676fd820df7023",
"lessThan": "5bb01c657ff9fc807c2c592ca18af34c4fc3bc6f",
"versionType": "git",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"drivers/of/base.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "3.2",
"status": "affected"
},
{
"version": "0",
"lessThan": "3.2",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.10.270",
"lessThanOrEqual": "5.10.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.15.221",
"lessThanOrEqual": "5.15.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.188",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.6.157",
"lessThanOrEqual": "6.6.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.12.109",
"lessThanOrEqual": "6.12.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.18.50",
"lessThanOrEqual": "6.18.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.2.4",
"lessThanOrEqual": "7.2.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.3",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {},
"references": [
{
"url": "https://git.kernel.org/stable/c/5bb01c657ff9fc807c2c592ca18af34c4fc3bc6f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/9253cfc5a85be1494ce56b4fc6f2d2b509440910",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/958d7ee9fcf008ef9d2072c6410ee1bf6abf3b64",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/96a9c984dd7c3589a2707a32b62802f98311dbfd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/acd1b49043366f43e932308b4db7d3ce568eeadb",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/da7a80ddc610a19b0378016a4d816b9355f013a7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/f7f6c3e32a31f2e1ed12075e8cd22b370a84e67a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/fd0c7bbda81c0e0c1cb7b68d267b87371584f560",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
]
}