CVE-2026-98892

firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size

State: Published
Severity: Not scored
Published: Oct 23, 2026
Updated: Oct 26, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size

BASE_ERROR_EVENT carries a variable number of message reports, with the count encoded in error_status. The notification parser used that count without checking whether the received payload contained all reported entries.

Reject truncated payloads before copying the report array.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	585dfab3fb80e67b3a54790b3d5ef2991feb3950 to before 4a754704698017ced0b657c92b468035faad00edAffected 585dfab3fb80e67b3a54790b3d5ef2991feb3950 to before 28d65a0a46435d48b96b6943c518095dff1602a1Affected 585dfab3fb80e67b3a54790b3d5ef2991feb3950 to before 890a9c3bf9dae90dcabded9d8e10c708a13779f7Affected 585dfab3fb80e67b3a54790b3d5ef2991feb3950 to before c0742f23ec13fb6f5e0cd884323467a6c127d3c2Affected 585dfab3fb80e67b3a54790b3d5ef2991feb3950 to before bd8bc95ef2daa3bac56197cffcbf2d4c5ed42216Affected 585dfab3fb80e67b3a54790b3d5ef2991feb3950 to before cb77a50d1114c0c9e084176301a8e094d383edfaAffected 585dfab3fb80e67b3a54790b3d5ef2991feb3950 to before 56e7e64cdd0e7209a58c8ec66028d63387402919Affected
LinuxLinux	5.9Affected before 5.9Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

585dfab3fb80e67b3a54790b3d5ef2991feb3950 to before 4a754704698017ced0b657c92b468035faad00edAffected
585dfab3fb80e67b3a54790b3d5ef2991feb3950 to before 28d65a0a46435d48b96b6943c518095dff1602a1Affected
585dfab3fb80e67b3a54790b3d5ef2991feb3950 to before 890a9c3bf9dae90dcabded9d8e10c708a13779f7Affected
585dfab3fb80e67b3a54790b3d5ef2991feb3950 to before c0742f23ec13fb6f5e0cd884323467a6c127d3c2Affected
585dfab3fb80e67b3a54790b3d5ef2991feb3950 to before bd8bc95ef2daa3bac56197cffcbf2d4c5ed42216Affected
585dfab3fb80e67b3a54790b3d5ef2991feb3950 to before cb77a50d1114c0c9e084176301a8e094d383edfaAffected
585dfab3fb80e67b3a54790b3d5ef2991feb3950 to before 56e7e64cdd0e7209a58c8ec66028d63387402919Affected

LinuxLinux

5.9Affected
before 5.9Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.