Validation Issues in Linux Kernel Affecting Firmware Management

CVE-2026-98892

What is CVE-2026-98892?

A vulnerability exists within the Linux kernel's firmware management that pertains to the validation of BASE_ERROR_EVENT payload sizes. The notification parser incorrectly handles the variable number of message reports indicated by error_status without verifying if the payload encompasses all reported entries. This flaw could lead to improper processing of truncated payloads, allowing potential exploitation by manipulating the message reports.

References