Back to CVE records
Not yet scoredPublished Oct 6, 2026
CVE-2026-98203Input: soc_button_array - check btns_desc->package.count
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: Input: soc_button_array - check btns_desc->package.count Check that btns_desc->package.count is not 0 before accessing btns_desc->package.elements[0].
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 4c3362f44980aba8e1e69cd6970effbd9f17dc69 before c3a94bfedfa2e4c4d37d1181e8db1ab010f1321a; from 4c3362f44980aba8e1e69cd6970effbd9f17dc69 before ec0576dabd6bf4f6532c5f0a58c9bf57095e45a4; from 4c3362f44980aba8e1e69cd6970effbd9f17dc69 before c62c6944c680bc4ae188ca9045daada32fcd10ec; from 4c3362f44980aba8e1e69cd6970effbd9f17dc69 before 42c7afc0e5f5b5e12e9689e9a9815b5824cf0efb; from 4c3362f44980aba8e1e69cd6970effbd9f17dc69 before eb5563386fb8c5dbb55d902a71a0ce10e4f307eb; from 4c3362f44980aba8e1e69cd6970effbd9f17dc69 before 8a70a192e3e5b3ccbeeaf149c931cf45b8e82155; from 4c3362f44980aba8e1e69cd6970effbd9f17dc69 before 12d80e6351556cfecbdd09416e5e4c73d6ca08ba; from 4c3362f44980aba8e1e69cd6970effbd9f17dc69 before fb5022278b6ea7f1838e3ef78028d5d5e3375f65 | CNA record |
References
- https://git.kernel.org/stable/c/c3a94bfedfa2e4c4d37d1181e8db1ab010f1321a
- https://git.kernel.org/stable/c/ec0576dabd6bf4f6532c5f0a58c9bf57095e45a4
- https://git.kernel.org/stable/c/c62c6944c680bc4ae188ca9045daada32fcd10ec
- https://git.kernel.org/stable/c/42c7afc0e5f5b5e12e9689e9a9815b5824cf0efb
- https://git.kernel.org/stable/c/eb5563386fb8c5dbb55d902a71a0ce10e4f307eb
- https://git.kernel.org/stable/c/8a70a192e3e5b3ccbeeaf149c931cf45b8e82155
- https://git.kernel.org/stable/c/12d80e6351556cfecbdd09416e5e4c73d6ca08ba
- https://git.kernel.org/stable/c/fb5022278b6ea7f1838e3ef78028d5d5e3375f65
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.