Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-92477 Details

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: debugfs: Reserve space for a string terminator ufs_saved_err_write() copies user input into a zero-initialized stack buffer and passes it to kstrtoint(). A write that fills the entire buffer overwrites its only terminator. Reject an input whose length leaves no room for the trailing NUL.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/2b3fb5693c25c21741f357a8c9d0e1f19b7e368f	kernel.org
https://git.kernel.org/stable/c/587be18e0935632ebd367b0f89e37aa5762e400f	kernel.org
https://git.kernel.org/stable/c/abd26e6b53c4169122d61fdd4cabe09bdd916aac	kernel.org
https://git.kernel.org/stable/c/b43890843e834300f967c69e74c7c2eb22cb1664	kernel.org
https://git.kernel.org/stable/c/cc92af8cc0e4dacd4375d34475141b0f1a70c09e	kernel.org
https://git.kernel.org/stable/c/d223989e1a1edad217b673486b093bd157fb6c9a	kernel.org

see all 6 references

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

No affected product data is available for this CVE.

Change History

1 change record found show changes