CVE-2026-98203 PUBLISHED

Input: soc_button_array - check btns_desc->package.count

Assigner: Linux
Reserved: 25.09.2026 Published: 06.10.2026 Updated: 06.10.2026

In the Linux kernel, the following vulnerability has been resolved:

Input: soc_button_array - check btns_desc->package.count

Check that btns_desc->package.count is not 0 before accessing btns_desc->package.elements[0].

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 4c3362f44980aba8e1e69cd6970effbd9f17dc69 to c3a94bfedfa2e4c4d37d1181e8db1ab010f1321a (excl.)
  • affected from 4c3362f44980aba8e1e69cd6970effbd9f17dc69 to ec0576dabd6bf4f6532c5f0a58c9bf57095e45a4 (excl.)
  • affected from 4c3362f44980aba8e1e69cd6970effbd9f17dc69 to c62c6944c680bc4ae188ca9045daada32fcd10ec (excl.)
  • affected from 4c3362f44980aba8e1e69cd6970effbd9f17dc69 to 42c7afc0e5f5b5e12e9689e9a9815b5824cf0efb (excl.)
  • affected from 4c3362f44980aba8e1e69cd6970effbd9f17dc69 to eb5563386fb8c5dbb55d902a71a0ce10e4f307eb (excl.)
  • affected from 4c3362f44980aba8e1e69cd6970effbd9f17dc69 to 8a70a192e3e5b3ccbeeaf149c931cf45b8e82155 (excl.)
  • affected from 4c3362f44980aba8e1e69cd6970effbd9f17dc69 to 12d80e6351556cfecbdd09416e5e4c73d6ca08ba (excl.)
  • affected from 4c3362f44980aba8e1e69cd6970effbd9f17dc69 to fb5022278b6ea7f1838e3ef78028d5d5e3375f65 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 4.12 is affected
  • unaffected from 0 to 4.12 (excl.)
  • unaffected from 5.10.271 to 5.10.* (incl.)
  • unaffected from 5.15.222 to 5.15.* (incl.)
  • unaffected from 6.1.189 to 6.1.* (incl.)
  • unaffected from 6.6.158 to 6.6.* (incl.)
  • unaffected from 6.12.112 to 6.12.* (incl.)
  • unaffected from 6.18.54 to 6.18.* (incl.)
  • unaffected from 7.2.8 to 7.2.* (incl.)
  • unaffected from 7.3-rc4 to * (incl.)

References