CVE-2026-93077

CVE CVE-2026-93077EUVD EUVD-2026-82187Published 2026-09-17T16:10:59.000Z

What the advisory describes

In the Linux kernel, the following vulnerability has been resolved: cxl/features: Clamp Get Feature output size to the remaining buffer cxl_get_feature() reads a feature in a loop but passes a fixed size_out as the output capacity every iteration. On the last partial iteration the buffer has less room left, so a device that returns more than asked can overflow feat_out. Use the per-iter size data_to_rd_size, which already tracks the remaining room, as the output capacity.

Source: EUVD (ENISA), in the words of the advisory.

Products the advisory names

These come from the advisory itself, not from any check we performed.

• Linux — Linux 5e5ac21f629de796ab5d598b59c5e468c6fe4f95 <b8abbd5c2928fd839dab702244cc57b228ab43aa; patch: 7.3-rc1; patch: 7.2.6; 6.15; patch: 0; 5e5ac21f629de796ab5d598b59c5e468c6fe4f95 <2aeb21fe557ef154f0cdf4f9745ebd8d5b31ca83; 5e5ac21f629de796ab5d598b59c5e468c6fe4f95 <ca95b15a0760e7724e61addbdd61050be13b6406; patch: 6.18.52

The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.

Carried in the product catalogue

An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.

• Linux — Linux

Patchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.