{"id":"CVE-2026-93213","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nof: fix out-of-bounds read in of_alias_scan() stem parser\n\nThe stem parser tests isdigit(*(end - 1)) before checking end > start\nand so reads one byte before the proper…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nof: fix out-of-bounds read in of_alias_scan() stem parser\n\nThe stem parser tests isdigit(*(end - 1)) before checking end > start\nand so reads one byte before the proper…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 611cad720148c899db5a383c1c676fd820df7023 < fd0c7bbda81c0e0c1cb7b68d267b87371584f560","Linux >= 611cad720148c899db5a383c1c676fd820df7023 < 958d7ee9fcf008ef9d2072c6410ee1bf6abf3b64","Linux >= 611cad720148c899db5a383c1c676fd820df7023 < f7f6c3e32a31f2e1ed12075e8cd22b370a84e67a","Linux >= 611cad720148c899db5a383c1c676fd820df7023 < da7a80ddc610a19b0378016a4d816b9355f013a7","Linux >= 611cad720148c899db5a383c1c676fd820df7023 < 96a9c984dd7c3589a2707a32b62802f98311dbfd","Linux >= 611cad720148c899db5a383c1c676fd820df7023 < 9253cfc5a85be1494ce56b4fc6f2d2b509440910","Linux >= 611cad720148c899db5a383c1c676fd820df7023 < acd1b49043366f43e932308b4db7d3ce568eeadb","Linux >= 611cad720148c899db5a383c1c676fd820df7023 < 5bb01c657ff9fc807c2c592ca18af34c4fc3bc6f","Linux 3.2"],"published":"2026-09-24","updated":"2026-09-24","sourceUpdated":"2026-09-24T16:17:16.257","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-93213","references":[{"url":"https://git.kernel.org/stable/c/5bb01c657ff9fc807c2c592ca18af34c4fc3bc6f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/9253cfc5a85be1494ce56b4fc6f2d2b509440910","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/958d7ee9fcf008ef9d2072c6410ee1bf6abf3b64","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/96a9c984dd7c3589a2707a32b62802f98311dbfd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/acd1b49043366f43e932308b4db7d3ce568eeadb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/da7a80ddc610a19b0378016a4d816b9355f013a7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/f7f6c3e32a31f2e1ed12075e8cd22b370a84e67a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/fd0c7bbda81c0e0c1cb7b68d267b87371584f560","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-24T15:45:56.672Z","slug":"CVE-2026-93213","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nof: fix out-of-bounds read in of_alias_scan() stem parser\n\nThe stem parser tests isdigit(*(end - 1)) before checking end > start\nand so reads one byte before the property name when the name is empty\nor all digits. Check the bound first.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}