CVE-2026-93129 PUBLISHED

platform/x86: dell-wmi-base: Fix handling of ultra performance key

Assigner: Linux
Reserved: 17.09.2026 Published: 17.09.2026 Updated: 17.09.2026

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: dell-wmi-base: Fix handling of ultra performance key

The commit message of commit 5fbd827eb9c2 ("platform/x86: dell-wmi: Recognise or support new switches") states that the ultra performance key contains additional data after the type and code fields. The event data passed to dell_wmi_process_key() is already parsed, so "buffer" already starts after those two fields.

Use the correct index for accessing the first data field to avoid a potential buffer overread.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 5fbd827eb9c224c33a5f263ee543a75fe957faa3 to 392c19faec6bf4cb72fb02322e2a61e198dd8f72 (excl.)
  • affected from 5fbd827eb9c224c33a5f263ee543a75fe957faa3 to adfd6846bea13667ff28f8aaf00c32fbd69825ab (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 5.16 is affected
  • unaffected from 0 to 5.16 (excl.)
  • unaffected from 7.2.6 to 7.2.* (incl.)
  • unaffected from 7.3-rc1 to * (incl.)

References