CVE-2026-92478

Unknown

Last modified

CVE-2026-92478 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Validate connected lane counts The connected lane count is used by TX equalization code to index arrays sized by UFS_MAX_LANES. Reject zero and out-of-range RX or TX lane counts before they can be propagated..

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Validate connected lane counts The connected lane count is used by TX equalization code to index arrays sized by UFS_MAX_LANES. Reject zero and out-of-range RX or TX lane counts before they can be propagated.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 03e5d38e2f985d8d0b0a60508c0b422f664808e3, < 4b62f73836f4d037c9afd20c4c6084e4d44b3a57; >= 03e5d38e2f985d8d0b0a60508c0b422f664808e3, < 9e6dd452f1affb5c412ca64bf5809ce9fde3174d
LinuxLinux7.1

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-92478?
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Validate connected lane counts The connected lane count is used by TX equalization code to index arrays sized by UFS_MAX_LANES. Reject zero and out-of-range RX or TX lane counts before they can be propagated.
How severe is CVE-2026-92478?
Severity scoring for CVE-2026-92478 is pending analysis.
How do I fix CVE-2026-92478?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

Are you affected by CVE-2026-92478?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST