CVE-2026-93265

Received Received - Intake

PCI/pwrctrl: tc9563 MAC Endpoint Parsing Fix in Linux Kernel

Publication date: 2026-09-24

Last updated on: 2026-09-25

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node DSP3 has an integrated Ethernet MAC Endpoint which has its own set of config registers for configuring settings such as ASPM. The Endpoint device has two physical functions and those two functions share the same settings. Parse the Endpoint node under DSP3 instead of parsing both functions. The existing parsing logic also has one OOB issue as parsing both functions will result in accessing past the tc9563_pwrctrl->cfg array.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-24

Last Modified

2026-09-25

Generated

2026-09-25

AI Q&A

2026-09-24

EPSS Evaluated

N/A

NVD

CVE-2026-93265

EUVD

EUVD-2026-86137

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves incorrect parsing of the integrated Ethernet MAC Endpoint node in the tc9563 PCI power control driver. The issue occurs because the existing logic parses both physical functions of the endpoint device, which share the same settings. This leads to an out-of-bounds (OOB) access when reading the tc9563_pwrctrl->cfg array.

Detection Guidance

This vulnerability is specific to the Linux kernel's PCI power control driver for the TC9563 device. Detection requires checking kernel logs for parsing errors related to the DSP3 Ethernet MAC Endpoint node or the tc9563_pwrctrl-cfg array access. Use commands like dmesg | grep -i tc9563 or journalctl -k | grep -i tc9563 to inspect kernel logs for errors.

Impact Analysis

This vulnerability could cause system instability or crashes due to memory corruption from the OOB access. It may also lead to incorrect power management settings for the Ethernet MAC, potentially affecting network connectivity or performance.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it is a low-level kernel issue related to PCIe power control and Ethernet MAC configuration. No evidence suggests it impacts data protection or privacy requirements.

Mitigation Strategies

Apply the Linux kernel patch that resolves this issue. Update to a kernel version that includes the fix for parsing the integrated Ethernet MAC Endpoint node in the tc9563 driver.

Hi! I’m here to help you understand CVE-2026-93265. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70