CVE-2026-53022

platform/x86: dell-wmi-sysman: bound enumeration string aggregation

State: Published
Severity: Not scored
Published: Jun 24, 2026
Updated: Jun 24, 2026
Reserved: Jun 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: dell-wmi-sysman: bound enumeration string aggregation

populate_enum_data() aggregates firmware-provided value-modifier and possible-value strings into fixed 512-byte struct members. The current code bounds each individual source string but then appends every string and separator with raw strcat() and no remaining-space check.

Switch the aggregation loops to a bounded append helper and reject enumeration packages whose combined strings do not fit in the destination buffers.

[ij: add include]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e8a60aa7404bfef37705da5607c97737073ac38d to before 7b3dc1f764bf24eb99474a5de8173b0b43a8b071Affected e8a60aa7404bfef37705da5607c97737073ac38d to before 75c738d4f27fa18a2a033de153bd40302bde6a66Affected e8a60aa7404bfef37705da5607c97737073ac38d to before ba0843c1955864401295f7ba3b420afe19f2266dAffected e8a60aa7404bfef37705da5607c97737073ac38d to before 5a04f9a36930792f6d64e28d43609e158d09b665Affected e8a60aa7404bfef37705da5607c97737073ac38d to before c5683ca4949a514fbe656c6d0d08c4c126e21db9Affected e8a60aa7404bfef37705da5607c97737073ac38d to before 90b118d264845f7aaf539ac49f7c75f1f29590e2Affected e8a60aa7404bfef37705da5607c97737073ac38d to before 3c34471c26abc52a37f5ad90949e2e4b8027eb14Affected
LinuxLinux	5.11Affected before 5.11Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.141 through 6.6.Not affected 6.12.91 through 6.12.Not affected 6.18.33 through 6.18.Not affected 7.0.10 through 7.0.Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

e8a60aa7404bfef37705da5607c97737073ac38d to before 7b3dc1f764bf24eb99474a5de8173b0b43a8b071Affected
e8a60aa7404bfef37705da5607c97737073ac38d to before 75c738d4f27fa18a2a033de153bd40302bde6a66Affected
e8a60aa7404bfef37705da5607c97737073ac38d to before ba0843c1955864401295f7ba3b420afe19f2266dAffected
e8a60aa7404bfef37705da5607c97737073ac38d to before 5a04f9a36930792f6d64e28d43609e158d09b665Affected
e8a60aa7404bfef37705da5607c97737073ac38d to before c5683ca4949a514fbe656c6d0d08c4c126e21db9Affected
e8a60aa7404bfef37705da5607c97737073ac38d to before 90b118d264845f7aaf539ac49f7c75f1f29590e2Affected
e8a60aa7404bfef37705da5607c97737073ac38d to before 3c34471c26abc52a37f5ad90949e2e4b8027eb14Affected

LinuxLinux

5.11Affected
before 5.11Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.141 through 6.6.*Not affected
6.12.91 through 6.12.*Not affected
6.18.33 through 6.18.*Not affected
7.0.10 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.