arm_scmi Firmware Sensor Update Size Validation in Linux Kernel
CVE-2026-98893 Published on October 23, 2026
firmware: arm_scmi: Validate SENSOR_UPDATE payload size
In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_scmi: Validate SENSOR_UPDATE payload size
SENSOR_UPDATE carries one or more sensor readings after the fixed
notification header. The parser derives the expected reading count
from the sensor description, but it did not verify that the received
payload contains those entries before parsing them.
Reject truncated update notifications before reading the variable
array.
Products Associated with CVE-2026-98893
stack.watch emails you whenever new vulnerabilities are published in Linux Kernel or Canonical Ubuntu Linux. Just hit a watch button to start following.
Affected Versions
Linux:- Version e3811190acf85c63518fbddaa28bcbfab2baa58d and below e543d60f966a5f5c92298720c2fd1810f85a6be3 is affected.
- Version e3811190acf85c63518fbddaa28bcbfab2baa58d and below 87a72e75f7560ea45cd28870194eaa153dd19e75 is affected.
- Version e3811190acf85c63518fbddaa28bcbfab2baa58d and below 1bbe431fc59704d012660647516f6f94ddd82564 is affected.
- Version e3811190acf85c63518fbddaa28bcbfab2baa58d and below c148ff2f5a168e0bc41d801efca6ee35a376cfcb is affected.
- Version e3811190acf85c63518fbddaa28bcbfab2baa58d and below 767789a58ae0d65ec3028e5b5b4da82210355d00 is affected.
- Version e3811190acf85c63518fbddaa28bcbfab2baa58d and below 32bc5496b48174dbca1f187f710955ee4d9527a1 is affected.
- Version 5.11 is affected.
- Before 5.11 is unaffected.
- Version 5.15.222, <= 5.15.* is unaffected.
- Version 6.1.189, <= 6.1.* is unaffected.
- Version 6.6.158, <= 6.6.* is unaffected.
- Version 6.12.111, <= 6.12.* is unaffected.
- Version 6.18.53, <= 6.18.* is unaffected.
- Version 7.2, <= * is unaffected.