Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-93046— software node: Fix software_node_get_reference_args() with index -1

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Linux 内核中，以下漏洞已得到修复： software node：修复 software_node_get_reference_args() 中 index 为 -1 的情况 传递给 的索引的边界检查存在缺陷：当传入 （即 -1 的无符号表示）时，边界检查未能正确处理，从而导致在属性数组中发生越界访问。本次修复完善了边界检查，使其能够覆盖 的情况。

CVSS 7.0 · High EPSS 0.16% · P4

Affected Version Matrix 25

VendorProduct Version RangeStatus
Linux Linux 142acd739eb6f08c148a96ae8309256f1422ff4b< 6cde06887487b4febd14658c9a246616abcc0097 affected
56ce76e8d406cc72b89aee7931df5cf3f18db49d< 0631384eadebc66d92d2dd72d57a0263c3877bee affected
9324127b07dde8529222dc19233aa57ec810856c< b2fa4e8c7e4a33e02e6aaa8f6df72f84cf4aed75 affected
f9397cf7bfb680799fb8c7f717c8f756384c3280< 4ebf96d5f834aba7f6d0397db4c421f6078171b9 affected
4b3383110b6df48e0ba5936af2cb68d5eb6bd43b< 849076df15129e47dd8db751fa18489419ffea56 affected
31e4e12e0e9609850cefd4b2e1adf782f56337d6< df5466412b362db7adfa78e3e092fe07ac6769a4 affected
31e4e12e0e9609850cefd4b2e1adf782f56337d6< 231bbc04c58f115a505bf3b668ec69ef40a1773b affected
31e4e12e0e9609850cefd4b2e1adf782f56337d6< ba3dedcf3bd47017307595a7e54924198f018246 affected
… +17 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-93046

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
software node: Fix software_node_get_reference_args() with index -1
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: software node: Fix software_node_get_reference_args() with index -1 The bounds check for the index passed to software_node_get_reference_args() was failing when passed UINT_MAX, this in turn would lead to an out of bound access in the property array. Fix the bound check to also cover the UINT_MAX case.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 142acd739eb6f08c148a96ae8309256f1422ff4b ~ 6cde06887487b4febd14658c9a246616abcc0097 -
Linux Linux 6.16 -

II. Public POCs for CVE-2026-93046

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-93046

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-93046 (8)

Same Patch Batch · Linux · 2026-09-17 · 600 CVEs total

CVE-2026-92489 9.8 CRITICAL xfrm: Fix skb double-free in xfrm_dev_direct_output()
CVE-2026-90235 9.8 CRITICAL sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE
CVE-2026-90173 9.8 CRITICAL smb: smbdirect: free completion queues with ib_free_cq()
CVE-2026-90104 9.8 CRITICAL NFSv4.1: zero referring call lists before decoding
CVE-2026-90151 9.8 CRITICAL NFSv4: remove callback IDR entry on client allocation failure
CVE-2026-90110 9.4 CRITICAL inetpeer: randomize RB-tree node comparison using SipHash
CVE-2026-90230 9.1 CRITICAL nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate()
CVE-2026-90414 9.1 CRITICAL IB/isert: reject PDUs declaring more data than was received
CVE-2026-90413 9.1 CRITICAL IB/isert: reject login PDUs declaring more data than was received
CVE-2026-90367 8.8 HIGH wifi: mt76: mt7996: hold dev->mt76.mutex while disabling tx worker in SER
CVE-2026-90329 8.8 HIGH HID: synchronize input before cleaning up a failed probe
CVE-2026-93189 8.8 HIGH HID: core: quiesce input in hid_hw_stop() to prevent use-after-free
CVE-2026-90240 8.8 HIGH iommu/vt-d: Flush context cache with correct SID when tearing down aliases
CVE-2026-90357 8.8 HIGH wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement
CVE-2026-90286 8.8 HIGH drm/amdgpu/gfx6: Use PFP on the compute queues too
CVE-2026-93042 8.8 HIGH dmaengine: dw-edma: Terminate all descriptors without callbacks
CVE-2026-90256 8.8 HIGH Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind
CVE-2026-90380 8.8 HIGH wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete
CVE-2026-90381 8.8 HIGH wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx()
CVE-2026-90425 8.8 HIGH iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID

Showing top 20 of 600 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-93046

No comments yet

Leave a comment