CVE-2026-92477 in Linux
要約
〜によって MITRE • 2026年09月17日
In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: debugfs: Reserve space for a string terminator
ufs_saved_err_write() copies user input into a zero-initialized stack buffer and passes it to kstrtoint(). A write that fills the entire buffer overwrites its only terminator.
Reject an input whose length leaves no room for the trailing NUL.
If you want to get best quality of vulnerability data, you may have to visit VulDB.