CVE-2026-93046 - Vulnerability Details

- software node: Fix software_node_get_reference_args() with index -1

Description

In the Linux kernel, the following vulnerability has been resolved:

software node: Fix software_node_get_reference_args() with index -1

The bounds check for the index passed to
software_node_get_reference_args() was failing when passed UINT_MAX,
this in turn would lead to an out of bound access in the property
array. Fix the bound check to also cover the UINT_MAX case.

Published: 2026-09-17

Score: n/a

EPSS: n/a

KEV: No

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`142acd739eb6f08c148a96ae8309256f1422ff4b`	affected	< 6cde06887487b4febd14658c9a246616abcc0097
`56ce76e8d406cc72b89aee7931df5cf3f18db49d`	affected	< 0631384eadebc66d92d2dd72d57a0263c3877bee
`9324127b07dde8529222dc19233aa57ec810856c`	affected	< b2fa4e8c7e4a33e02e6aaa8f6df72f84cf4aed75
`f9397cf7bfb680799fb8c7f717c8f756384c3280`	affected	< 4ebf96d5f834aba7f6d0397db4c421f6078171b9
`4b3383110b6df48e0ba5936af2cb68d5eb6bd43b`	affected	< 849076df15129e47dd8db751fa18489419ffea56
`31e4e12e0e9609850cefd4b2e1adf782f56337d6`	affected	< df5466412b362db7adfa78e3e092fe07ac6769a4
`31e4e12e0e9609850cefd4b2e1adf782f56337d6`	affected	< 231bbc04c58f115a505bf3b668ec69ef40a1773b
`31e4e12e0e9609850cefd4b2e1adf782f56337d6`	affected	< ba3dedcf3bd47017307595a7e54924198f018246
`7af18e42bdefe1dba5bcb32555a4d524fd504939`	affected	—
`5.10.239`	affected	< 5.10.270
`5.15.186`	affected	< 5.15.221
`6.1.142`	affected	< 6.1.188
`6.6.95`	affected	< 6.6.157
`6.12.35`	affected	< 6.12.110
`6.15.4`	affected	< 6.16

Linux

affected

Version	Status	Constraints
`6.16`	affected	—
`0`	unaffected	< 6.16
`5.10.270`	unaffected	≤ 5.10.*
`5.15.221`	unaffected	≤ 5.15.*
`6.1.188`	unaffected	≤ 6.1.*
`6.6.157`	unaffected	≤ 6.6.*
`6.12.110`	unaffected	≤ 6.12.*
`6.18.52`	unaffected	≤ 6.18.*
`7.2.6`	unaffected	≤ 7.2.*
`7.3-rc1`	unaffected	≤ *

No data.

No data available yet.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/0631384eadebc66d92d2dd72d57a0263c3877bee
https://git.kernel.org/stable/c/231bbc04c58f115a505bf3b668ec69ef40a1773b
https://git.kernel.org/stable/c/4ebf96d5f834aba7f6d0397db4c421f6078171b9
https://git.kernel.org/stable/c/6cde06887487b4febd14658c9a246616abcc0097
https://git.kernel.org/stable/c/849076df15129e47dd8db751fa18489419ffea56
https://git.kernel.org/stable/c/b2fa4e8c7e4a33e02e6aaa8f6df72f84cf4aed75
https://git.kernel.org/stable/c/ba3dedcf3bd47017307595a7e54924198f018246
https://git.kernel.org/stable/c/df5466412b362db7adfa78e3e092fe07ac6769a4

History

Thu, 17 Sep 2026 16:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: software node: Fix software_node_get_reference_args() with index -1 The bounds check for the index passed to software_node_get_reference_args() was failing when passed UINT_MAX, this in turn would lead to an out of bound access in the property array. Fix the bound check to also cover the UINT_MAX case.
Title		software node: Fix software_node_get_reference_args() with index -1
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/0631384eadebc66d92d2dd72d57a0263c3877bee https://git.kernel.org/stable/c/231bbc04c58f115a505bf3b668ec69ef40a1773b https://git.kernel.org/stable/c/4ebf96d5f834aba7f6d0397db4c421f6078171b9 https://git.kernel.org/stable/c/6cde06887487b4febd14658c9a246616abcc0097 https://git.kernel.org/stable/c/849076df15129e47dd8db751fa18489419ffea56 https://git.kernel.org/stable/c/b2fa4e8c7e4a33e02e6aaa8f6df72f84cf4aed75 https://git.kernel.org/stable/c/ba3dedcf3bd47017307595a7e54924198f018246 https://git.kernel.org/stable/c/df5466412b362db7adfa78e3e092fe07ac6769a4

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-09-17T16:10:37.691Z

Updated: 2026-09-17T16:10:37.691Z

Reserved: 2026-09-17T15:57:05.658Z

Link: CVE-2026-93046

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-09-17T17:17:57.843

Modified: 2026-09-17T17:17:57.843

Link: CVE-2026-93046

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

Tracking

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object