01 Record

CVE-2026-98155

accel/qaic: Address potential out-of-bounds read in resp_worker()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

accel/qaic: Address potential out-of-bounds read in resp_worker()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.11% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 1.5% of scored records. A rank, not a probability.
NVD base score: 7.1 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-10-20.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-09-25 10:36Z1 MO AGO

Last updated

2026-10-19 09:14Z10 DAYS AGO

Reserved

2026-09-25

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-125Out-of-bounds ReadBase

Data version

5.2

Document digest

a5c569730f214abd655d274ab4949f57aabffd4f6830430503e763127d38c0b5

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux2dd67966f39a2abf8ccb4865031c722e40e01b7f to < 5807a65f301b6c0e73a2dc03dd6f5e80a2861b72, 08021f2d4a557d6491e3bcc288e96425f50aa3cf to < f4b64488f3deca63f7fbc7d7c3835b2e668003f9, f403094d9075d7c565a3d81002b781c325cb3c07 to < 12deeade460d47031267256ba07add51cc7eabd0, 2feec5ae5df785658924ab6bd91280dc3926507c to < c72e81ee46bdd4c221114d6e9515e9b4647616d7, 2feec5ae5df785658924ab6bd91280dc3926507c to < ab243f74ab4084ca5c8dec608cb5b0deb27db067, ee0180e77e6c8482644569632065411de844c515, 6.6.134 to < 6.6.158, 6.12.81 to < 6.12.111, 6.18.22 to < 6.18.53, 6.19.12 to < 6.20, 7.0—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/5807a65f301b6c0e73a2dc03dd6f5e80a2861b72
git.kernel.orghttps://git.kernel.org/stable/c/f4b64488f3deca63f7fbc7d7c3835b2e668003f9
git.kernel.orghttps://git.kernel.org/stable/c/12deeade460d47031267256ba07add51cc7eabd0
git.kernel.orghttps://git.kernel.org/stable/c/c72e81ee46bdd4c221114d6e9515e9b4647616d7
git.kernel.orghttps://git.kernel.org/stable/c/ab243f74ab4084ca5c8dec608cb5b0deb27db067

07 Fixed in

Debian 12

linux-6.12
Fixed in 6.12.111-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.111-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.7-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.