CVE-2026-98893

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Validate SENSOR_UPDATE payload size SENSOR_UPDATE carries one or more sensor readings after the fixed notification header. The parser derives the expected reading count from the sensor description, but it did not verify that the received payload contains those entries before parsing them. Reject truncated update notifications before reading the variable array.

EPSS

0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-25)

Published

2026-10-23

Modified

2026-10-26

Record from

the NVD, synced 2026-10-26

References

• https://git.kernel.org/stable/c/1bbe431fc59704d012660647516f6f94ddd82564
• https://git.kernel.org/stable/c/32bc5496b48174dbca1f187f710955ee4d9527a1
• https://git.kernel.org/stable/c/767789a58ae0d65ec3028e5b5b4da82210355d00
• https://git.kernel.org/stable/c/87a72e75f7560ea45cd28870194eaa153dd19e75
• https://git.kernel.org/stable/c/c148ff2f5a168e0bc41d801efca6ee35a376cfcb

Check your stackJSON