CVE-2026-98892 — firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size BASE_ERROR_EVENT carries a variable number of me…
Published: 2026-10-23 · CVSS: Unscored
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size BASE_ERROR_EVENT carries a variable number of message reports, with the count encoded in error_status. The notification parser used that count without checking whether the received payload contained all reported entries. Reject truncated payloads before copying the report array.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7