CVE-2026-89726
Description
In the Linux kernel, the following vulnerability has been resolved: lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() Patch series "lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()", v2. This series fixes an off-by-one out-of-bounds read in ucs2_strnlen(). The first patch is the real fix, the second patch comes as a bonus and fixes the code indentation. This patch (of 2): ucs2_strnlen() checks the current character before checking whether the caller-provided maximum length has been reached. If the input is not NUL-terminated within that bound, the loop can read one ucs2_char_t past the limit. Test the length before dereferencing to prevent an off-by-one out-of-bounds read.
How to fix
- Linux Linux04ae68af4107600120c3c41c94268f43bc350d48, 2e5a70a175f0c74e7238b013a96c4eabc3002934, 3ada20e110bf3245edb0a3bcddadc33d0f142f8d, 60c74f42f5abddb85dd919b4448d5474e65dbe76, 709eb41adaf78d59d4579a13a898125919b69bcc, 7d658da725ea81c91f73087547b97e7ced82d62b, 1b0dc3cbb8630f0b5cb34d848628225920a904be, cec0d03fe785380540dc1b4d07c80f67ae2ffc78 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 04ae68af4107600120c3c41c94268f43bc350d48, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 2e5a70a175f0c74e7238b013a96c4eabc3002934, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 3ada20e110bf3245edb0a3bcddadc33d0f142f8d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 60c74f42f5abddb85dd919b4448d5474e65dbe76, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 709eb41adaf78d59d4579a13a898125919b69bcc, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 7d658da725ea81c91f73087547b97e7ced82d62b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 1b0dc3cbb8630f0b5cb34d848628225920a904be, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < cec0d03fe785380540dc1b4d07c80f67ae2ffc78, 2.6.12 | 04ae68af4107600120c3c41c94268f43bc350d48, 2e5a70a175f0c74e7238b013a96c4eabc3002934, 3ada20e110bf3245edb0a3bcddadc33d0f142f8d, 60c74f42f5abddb85dd919b4448d5474e65dbe76, 709eb41adaf78d59d4579a13a898125919b69bcc, 7d658da725ea81c91f73087547b97e7ced82d62b, 1b0dc3cbb8630f0b5cb34d848628225920a904be, cec0d03fe785380540dc1b4d07c80f67ae2ffc78 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.