01 Record

CVE-2026-93046

software node: Fix software_node_get_reference_args() with index -1

HighPUBLISHEDCNA: Linux

CNA base score7.0 CVSS v3.xCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

software node: Fix software_node_get_reference_args() with index -1

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.14% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 4.0% of scored records. A rank, not a probability.
NVD base score: 7.0 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Received. NVD last modified this record on 2026-10-19.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-09-17 16:10Z1 MO AGO

Last updated

2026-10-19 09:04Z10 DAYS AGO

Reserved

2026-09-17

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.0)

CNA CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-125Out-of-bounds ReadBase

Data version

5.2

Document digest

5e272e906a37f4b69878272d57936ee62ad8c019bff9eb1926f3f3d8d000ce34

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux142acd739eb6f08c148a96ae8309256f1422ff4b to < 6cde06887487b4febd14658c9a246616abcc0097, 56ce76e8d406cc72b89aee7931df5cf3f18db49d to < 0631384eadebc66d92d2dd72d57a0263c3877bee, 9324127b07dde8529222dc19233aa57ec810856c to < b2fa4e8c7e4a33e02e6aaa8f6df72f84cf4aed75, f9397cf7bfb680799fb8c7f717c8f756384c3280 to < 4ebf96d5f834aba7f6d0397db4c421f6078171b9, 4b3383110b6df48e0ba5936af2cb68d5eb6bd43b to < 849076df15129e47dd8db751fa18489419ffea56, 31e4e12e0e9609850cefd4b2e1adf782f56337d6 to < df5466412b362db7adfa78e3e092fe07ac6769a4, 31e4e12e0e9609850cefd4b2e1adf782f56337d6 to < 231bbc04c58f115a505bf3b668ec69ef40a1773b, 31e4e12e0e9609850cefd4b2e1adf782f56337d6 to < ba3dedcf3bd47017307595a7e54924198f018246, 7af18e42bdefe1dba5bcb32555a4d524fd504939, 5.10.239 to < 5.10.270, 5.15.186 to < 5.15.221, 6.1.142 to < 6.1.188, 6.6.95 to < 6.6.157, 6.12.35 to < 6.12.110, 6.15.4 to < 6.16, 6.16—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/6cde06887487b4febd14658c9a246616abcc0097
git.kernel.orghttps://git.kernel.org/stable/c/0631384eadebc66d92d2dd72d57a0263c3877bee
git.kernel.orghttps://git.kernel.org/stable/c/b2fa4e8c7e4a33e02e6aaa8f6df72f84cf4aed75
git.kernel.orghttps://git.kernel.org/stable/c/4ebf96d5f834aba7f6d0397db4c421f6078171b9
git.kernel.orghttps://git.kernel.org/stable/c/849076df15129e47dd8db751fa18489419ffea56
git.kernel.orghttps://git.kernel.org/stable/c/df5466412b362db7adfa78e3e092fe07ac6769a4
git.kernel.orghttps://git.kernel.org/stable/c/231bbc04c58f115a505bf3b668ec69ef40a1773b
git.kernel.orghttps://git.kernel.org/stable/c/ba3dedcf3bd47017307595a7e54924198f018246

07 Fixed in

Debian 12

linux
Fixed in 6.1.190-1
linux-6.12
Fixed in 6.12.111-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.111-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.