CVE-2026-98892

Fixed in a distro release EPSS <1%

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size BASE_ERROR_EVENT carries a variable number of message reports, with the count encoded in error_status. The notification parser used that count without checking whether the received payload contained all reported entries. Reject truncated payloads before copying the report array.

Published 2026-10-23 · CVE record · OSV

Products: Linux

Distro releases