Answer in brief
CVE-2026-93213 records a Unknown severity vulnerability in of: fix out-of-bounds read in of_alias_scan() stem parser. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=611cad720148c899db5a383c1c676fd820df7023 <fd0c7bbda81c0e0c1cb7b68d267b87371584f560 || >=611cad720148c899db5a383c1c676fd820df7023 <958d7ee9fcf008ef9d2072c6410ee1bf6abf3b64 || >=611cad720148c899db5a383c1c676fd820df7023 <f7f6c3e32a31f2e1ed12075e8cd22b370a84e67a || >=611cad720148c899db5a383c1c676fd820df7023 <da7a80ddc610a19b0378016a4d816b9355f013a7 || >=611cad720148c899db5a383c1c676fd820df7023 <96a9c984dd7c3589a2707a32b62802f98311dbfd || >=611cad720148c899db5a383c1c676fd820df7023 <9253cfc5a85be1494ce56b4fc6f2d2b509440910 || >=611cad720148c899db5a383c1c676fd820df7023 <acd1b49043366f43e932308b4db7d3ce568eeadb || >=611cad720148c899db5a383c1c676fd820df7023 <5bb01c657ff9fc807c2c592ca18af34c4fc3bc6f | fd0c7bbda81c0e0c1cb7b68d267b87371584f560, 958d7ee9fcf008ef9d2072c6410ee1bf6abf3b64, f7f6c3e32a31f2e1ed12075e8cd22b370a84e67a, da7a80ddc610a19b0378016a4d816b9355f013a7, 96a9c984dd7c3589a2707a32b62802f98311dbfd, 9253cfc5a85be1494ce56b4fc6f2d2b509440910, acd1b49043366f43e932308b4db7d3ce568eeadb, 5bb01c657ff9fc807c2c592ca18af34c4fc3bc6f |
| Linux/Linuxgeneric | 3.2 | Not reported |
Published upstream
Sep 24, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 24, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 25, 2026
In the Linux kernel, the following vulnerability has been resolved: of: fix out-of-bounds read in of_alias_scan() stem parser The stem parser tests isdigit(*(end - 1)) before checking end > start and so reads one byte before the property name when the name is empty or all digits. Check the bound first.
Quoted source text, attributed separately from HOL analysis.