Riskcovery

CVE-2026-92478

scsi: ufs: core: Validate connected lane counts

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 19, 2026
Reserved
Sep 16, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: ufs: core: Validate connected lane counts

The connected lane count is used by TX equalization code to index arrays sized by UFS_MAX_LANES. Reject zero and out-of-range RX or TX lane counts before they can be propagated.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 03e5d38e2f985d8d0b0a60508c0b422f664808e3 to before 4b62f73836f4d037c9afd20c4c6084e4d44b3a57Affected
  • 03e5d38e2f985d8d0b0a60508c0b422f664808e3 to before 9e6dd452f1affb5c412ca64bf5809ce9fde3174dAffected
LinuxLinux
  • 7.1Affected
  • before 7.1Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.