CVE-2026-92478 PUBLISHED

scsi: ufs: core: Validate connected lane counts

Assigner: Linux
Reserved: 16.09.2026 Published: 17.09.2026 Updated: 17.09.2026

In the Linux kernel, the following vulnerability has been resolved:

scsi: ufs: core: Validate connected lane counts

The connected lane count is used by TX equalization code to index arrays sized by UFS_MAX_LANES. Reject zero and out-of-range RX or TX lane counts before they can be propagated.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 03e5d38e2f985d8d0b0a60508c0b422f664808e3 to 4b62f73836f4d037c9afd20c4c6084e4d44b3a57 (excl.)
  • affected from 03e5d38e2f985d8d0b0a60508c0b422f664808e3 to 9e6dd452f1affb5c412ca64bf5809ce9fde3174d (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 7.1 is affected
  • unaffected from 0 to 7.1 (excl.)
  • unaffected from 7.2.6 to 7.2.* (incl.)
  • unaffected from 7.3-rc1 to * (incl.)

References