CVE-2026-93213

of: fix out-of-bounds read in of_alias_scan() stem parser

State: Published
Severity: Not scored
Published: Sep 24, 2026
Updated: Oct 19, 2026
Reserved: Sep 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

of: fix out-of-bounds read in of_alias_scan() stem parser

The stem parser tests isdigit(*(end - 1)) before checking end > start and so reads one byte before the property name when the name is empty or all digits. Check the bound first.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	611cad720148c899db5a383c1c676fd820df7023 to before fd0c7bbda81c0e0c1cb7b68d267b87371584f560Affected 611cad720148c899db5a383c1c676fd820df7023 to before 958d7ee9fcf008ef9d2072c6410ee1bf6abf3b64Affected 611cad720148c899db5a383c1c676fd820df7023 to before f7f6c3e32a31f2e1ed12075e8cd22b370a84e67aAffected 611cad720148c899db5a383c1c676fd820df7023 to before da7a80ddc610a19b0378016a4d816b9355f013a7Affected 611cad720148c899db5a383c1c676fd820df7023 to before 96a9c984dd7c3589a2707a32b62802f98311dbfdAffected 611cad720148c899db5a383c1c676fd820df7023 to before 9253cfc5a85be1494ce56b4fc6f2d2b509440910Affected 611cad720148c899db5a383c1c676fd820df7023 to before acd1b49043366f43e932308b4db7d3ce568eeadbAffected 611cad720148c899db5a383c1c676fd820df7023 to before 5bb01c657ff9fc807c2c592ca18af34c4fc3bc6fAffected
LinuxLinux	3.2Affected before 3.2Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.109 through 6.12.Not affected 6.18.50 through 6.18.Not affected 7.2.4 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

611cad720148c899db5a383c1c676fd820df7023 to before fd0c7bbda81c0e0c1cb7b68d267b87371584f560Affected
611cad720148c899db5a383c1c676fd820df7023 to before 958d7ee9fcf008ef9d2072c6410ee1bf6abf3b64Affected
611cad720148c899db5a383c1c676fd820df7023 to before f7f6c3e32a31f2e1ed12075e8cd22b370a84e67aAffected
611cad720148c899db5a383c1c676fd820df7023 to before da7a80ddc610a19b0378016a4d816b9355f013a7Affected
611cad720148c899db5a383c1c676fd820df7023 to before 96a9c984dd7c3589a2707a32b62802f98311dbfdAffected
611cad720148c899db5a383c1c676fd820df7023 to before 9253cfc5a85be1494ce56b4fc6f2d2b509440910Affected
611cad720148c899db5a383c1c676fd820df7023 to before acd1b49043366f43e932308b4db7d3ce568eeadbAffected
611cad720148c899db5a383c1c676fd820df7023 to before 5bb01c657ff9fc807c2c592ca18af34c4fc3bc6fAffected

LinuxLinux

3.2Affected
before 3.2Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.109 through 6.12.*Not affected
6.18.50 through 6.18.*Not affected
7.2.4 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.