Strix
73K

CVE-2026-98892

UnknownEPSS 0.19%

Last modified

CVE-2026-98892 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size BASE_ERROR_EVENT carries a variable number of message reports, with the count encoded in error_status. The notification parser used that count without checking whether the received payload contained all reported entries. Reject truncated payloads before copying the report array.. EPSS estimates a 0.19% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size BASE_ERROR_EVENT carries a variable number of message reports, with the count encoded in error_status. The notification parser used that count without checking whether the received payload contained all reported entries. Reject truncated payloads before copying the report array.

Metrics

EPSS Probability
0.19%

8.2th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 585dfab3fb80e67b3a54790b3d5ef2991feb3950, < 4a754704698017ced0b657c92b468035faad00ed; >= 585dfab3fb80e67b3a54790b3d5ef2991feb3950, < 28d65a0a46435d48b96b6943c518095dff1602a1; >= 585dfab3fb80e67b3a54790b3d5ef2991feb3950, < 890a9c3bf9dae90dcabded9d8e10c708a13779f7; >= 585dfab3fb80e67b3a54790b3d5ef2991feb3950, < c0742f23ec13fb6f5e0cd884323467a6c127d3c2; >= 585dfab3fb80e67b3a54790b3d5ef2991feb3950, < bd8bc95ef2daa3bac56197cffcbf2d4c5ed42216; >= 585dfab3fb80e67b3a54790b3d5ef2991feb3950, < cb77a50d1114c0c9e084176301a8e094d383edfa; >= 585dfab3fb80e67b3a54790b3d5ef2991feb3950, < 56e7e64cdd0e7209a58c8ec66028d63387402919
LinuxLinux5.9

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98892?
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size BASE_ERROR_EVENT carries a variable number of message reports, with the count encoded in error_status. The notification parser used that count without checking whether the received payload contained all reported entries. Reject truncated payloads before copying the report array.
How severe is CVE-2026-98892?
Severity scoring for CVE-2026-98892 is pending analysis. The EPSS model estimates a 0.19% probability of exploitation in the next 30 days.
How do I fix CVE-2026-98892?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98892?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST