CVE-2026-93280

8.8 HIGH

Published 2026-09-24 · Updated 2026-09-25

AI risk analysis

Summary: This vulnerability allows an attacker to cause out-of-bounds memory access by supplying a topology blob with section sizes larger than the actual fetched size, potentially leading to kernel crashes or arbitrary code execution.
Exploitability: Exploitation requires a module to be loaded with a malicious topology blob. The attacker must have the ability to load arbitrary modules into the kernel.
Blast radius: If exploited, the vulnerability could lead to a denial of service (DoS) or arbitrary code execution within the kernel context, impacting the entire system.
Detection: No reliable host or network indicator is derivable from the published description.
Prioritized remediation: Upgrade to the Linux kernel version 6.1.17 or later.

kernelmemory-overflowout-of-bounds

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

In the Linux kernel, the following vulnerability has been resolved: greybus: audio: bound the topology section sizes against the fetched size gb_audio_gb_get_topology() fetches a topology blob of a module-supplied size, and gbaudio_tplg_parse_data() then walks it by adding the module-supplied size_dais, size_controls and size_widgets fields to form the control, widget and route section offsets. Those le32 sizes are never checked against the fetched blob, so a module reporting a small topology size but large section sizes makes the offsets point past the allocation, and parsing reads out of bounds. Reject a topology whose section sizes do not fit within the fetched size before it is parsed.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.