CVE-2026-92477 in Linux
Riassunto
di MITRE • 17/09/2026
In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: debugfs: Reserve space for a string terminator
ufs_saved_err_write() copies user input into a zero-initialized stack buffer and passes it to kstrtoint(). A write that fills the entire buffer overwrites its only terminator.
Reject an input whose length leaves no room for the trailing NUL.
If you want to get best quality of vulnerability data, you may have to visit VulDB.