CVE-2026-93213

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: of: fix out-of-bounds read in of_alias_scan() stem parser The stem parser tests isdigit(*(end - 1)) before checking end > start and so reads one byte before the property name when the name is empty or all digits. Check the bound first.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedSep 24, 2026
First seenSep 24, 2026

How to fix

Update
  • Linux Linuxfd0c7bbda81c0e0c1cb7b68d267b87371584f560, 958d7ee9fcf008ef9d2072c6410ee1bf6abf3b64, f7f6c3e32a31f2e1ed12075e8cd22b370a84e67a, da7a80ddc610a19b0378016a4d816b9355f013a7, 96a9c984dd7c3589a2707a32b62802f98311dbfd, 9253cfc5a85be1494ce56b4fc6f2d2b509440910, acd1b49043366f43e932308b4db7d3ce568eeadb, 5bb01c657ff9fc807c2c592ca18af34c4fc3bc6f or later

Affected products

ProductAffected versionsFixed in
Linux Linux611cad720148c899db5a383c1c676fd820df7023 ≤ v < fd0c7bbda81c0e0c1cb7b68d267b87371584f560, 611cad720148c899db5a383c1c676fd820df7023 ≤ v < 958d7ee9fcf008ef9d2072c6410ee1bf6abf3b64, 611cad720148c899db5a383c1c676fd820df7023 ≤ v < f7f6c3e32a31f2e1ed12075e8cd22b370a84e67a, 611cad720148c899db5a383c1c676fd820df7023 ≤ v < da7a80ddc610a19b0378016a4d816b9355f013a7, 611cad720148c899db5a383c1c676fd820df7023 ≤ v < 96a9c984dd7c3589a2707a32b62802f98311dbfd, 611cad720148c899db5a383c1c676fd820df7023 ≤ v < 9253cfc5a85be1494ce56b4fc6f2d2b509440910, 611cad720148c899db5a383c1c676fd820df7023 ≤ v < acd1b49043366f43e932308b4db7d3ce568eeadb, 611cad720148c899db5a383c1c676fd820df7023 ≤ v < 5bb01c657ff9fc807c2c592ca18af34c4fc3bc6f, 3.2fd0c7bbda81c0e0c1cb7b68d267b87371584f560, 958d7ee9fcf008ef9d2072c6410ee1bf6abf3b64, f7f6c3e32a31f2e1ed12075e8cd22b370a84e67a, da7a80ddc610a19b0378016a4d816b9355f013a7, 96a9c984dd7c3589a2707a32b62802f98311dbfd, 9253cfc5a85be1494ce56b4fc6f2d2b509440910, acd1b49043366f43e932308b4db7d3ce568eeadb, 5bb01c657ff9fc807c2c592ca18af34c4fc3bc6f

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.