CVE-2026-98658iio: proximity: aw96103: validate firmware data length
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: iio: proximity: aw96103: validate firmware data length The firmware parser reads a length from the binary header and then uses it to walk six-byte register/value entries. A truncated firmware image can make the parser read beyond the copied firmware buffer. A value smaller than the four-byte count field also underflows, producing a very large length. Read the little-endian field with get_unaligned_le32(), as previously proposed by David Lechner. Validate the header size, reject an underflowed length, ensure the resulting payload is contained in the firmware image, and require it to contain whole register/value entries.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | 07b241262dcad07671c444ca955903325de28e9e builds before 4a9b9f2d4e26589afd0ac099c8e5593170dd5ac7; from 07b241262dcad07671c444ca955903325de28e9e before 6501b032be217ecf47e793b78a05078cf0b604ad; from 07b241262dcad07671c444ca955903325de28e9e before 815ae0b73b69ace207b6bbf7ef428b06491c3ddb; 07b241262dcad07671c444ca955903325de28e9e builds before 1a7c522a35477d70320bd64aba8e9de0c1058c6f | CNA record |
References
- https://git.kernel.org/stable/c/4a9b9f2d4e26589afd0ac099c8e5593170dd5ac7
- https://git.kernel.org/stable/c/6501b032be217ecf47e793b78a05078cf0b604ad
- https://git.kernel.org/stable/c/815ae0b73b69ace207b6bbf7ef428b06491c3ddb
- https://git.kernel.org/stable/c/1a7c522a35477d70320bd64aba8e9de0c1058c6f
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.