Strix
73.1K

CVE-2026-98658

Unknown

Last modified

CVE-2026-98658 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: iio: proximity: aw96103: validate firmware data length The firmware parser reads a length from the binary header and then uses it to walk six-byte register/value entries. A truncated firmware image can make the parser read beyond the copied firmware buffer.

Description

In the Linux kernel, the following vulnerability has been resolved: iio: proximity: aw96103: validate firmware data length The firmware parser reads a length from the binary header and then uses it to walk six-byte register/value entries. A truncated firmware image can make the parser read beyond the copied firmware buffer. A value smaller than the four-byte count field also underflows, producing a very large length. Read the little-endian field with get_unaligned_le32(), as previously proposed by David Lechner. Validate the header size, reject an underflowed length, ensure the resulting payload is contained in the firmware image, and require it to contain whole register/value entries.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 07b241262dcad07671c444ca955903325de28e9e, < 4a9b9f2d4e26589afd0ac099c8e5593170dd5ac7; >= 07b241262dcad07671c444ca955903325de28e9e, < 6501b032be217ecf47e793b78a05078cf0b604ad; >= 07b241262dcad07671c444ca955903325de28e9e, < 815ae0b73b69ace207b6bbf7ef428b06491c3ddb; >= 07b241262dcad07671c444ca955903325de28e9e, < 1a7c522a35477d70320bd64aba8e9de0c1058c6f
LinuxLinux6.12

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98658?
In the Linux kernel, the following vulnerability has been resolved: iio: proximity: aw96103: validate firmware data length The firmware parser reads a length from the binary header and then uses it to walk six-byte register/value entries. A truncated firmware image can make the parser read beyond the copied firmware buffer. A value smaller than the four-byte count field also underflows, producing a very large length. Read the little-endian field with get_unaligned_le32(), as previously proposed by David Lechner. Validate the header size, reject an underflowed length, ensure the resulting payload is contained in the firmware image, and require it to contain whole register/value entries.
How severe is CVE-2026-98658?
Severity scoring for CVE-2026-98658 is pending analysis.
How do I fix CVE-2026-98658?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98658?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST