Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-80649

Опубликовано: 28 авг. 2026
Источник: debian
EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix OOB in scmi_power_name_get() scmi_power_name_get() does not validate the domain number passed by the external caller, which may lead to an out-of-bounds access. Fix this by returning "unknown" for invalid domains, like scmi_reset_name_get() does.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
linuxfixed7.1.5-1package
linuxfixed6.12.100-1trixiepackage
linuxfixed6.1.180-1bookwormpackage

Примечания

  • https://git.kernel.org/linus/f9ef3f66f4b18078e464b7606f9497e4dbeb9905 (7.2-rc1)

EPSS

Процентиль: 3%
0.00129
Низкий

Связанные уязвимости

CVSS3: 7.8
ubuntu
20 дней назад

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix OOB in scmi_power_name_get() scmi_power_name_get() does not validate the domain number passed by the external caller, which may lead to an out-of-bounds access. Fix this by returning "unknown" for invalid domains, like scmi_reset_name_get() does.

CVSS3: 5.5
redhat
20 дней назад

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix OOB in scmi_power_name_get() scmi_power_name_get() does not validate the domain number passed by the external caller, which may lead to an out-of-bounds access. Fix this by returning "unknown" for invalid domains, like scmi_reset_name_get() does.

CVSS3: 7.8
nvd
20 дней назад

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix OOB in scmi_power_name_get() scmi_power_name_get() does not validate the domain number passed by the external caller, which may lead to an out-of-bounds access. Fix this by returning "unknown" for invalid domains, like scmi_reset_name_get() does.

CVSS3: 7.8
github
20 дней назад

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix OOB in scmi_power_name_get() scmi_power_name_get() does not validate the domain number passed by the external caller, which may lead to an out-of-bounds access. Fix this by returning "unknown" for invalid domains, like scmi_reset_name_get() does.

EPSS

Процентиль: 3%
0.00129
Низкий