Out-of-Bounds Read Vulnerability in Linux Kernel Affecting Multiple Devices

CVE-2026-89743

What is CVE-2026-89743?

The Linux kernel has a vulnerability related to the NSM device where it fails to properly limit the length of the response stored in memory, allowing a malicious backend to report an excessive length. This oversight can lead to an out-of-bounds read, potentially exposing adjacent kernel heap memory to user space, which could result in unintended data disclosure. While well-behaved devices should not present any issues, inadequate checks in the response handling can compromise system security and integrity.

References