CVE-2026-93280

Received Received - Intake

Out-of-Bounds Read in Linux Kernel Greybus Audio

Publication date: 2026-09-24

Last updated on: 2026-09-25

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: greybus: audio: bound the topology section sizes against the fetched size gb_audio_gb_get_topology() fetches a topology blob of a module-supplied size, and gbaudio_tplg_parse_data() then walks it by adding the module-supplied size_dais, size_controls and size_widgets fields to form the control, widget and route section offsets. Those le32 sizes are never checked against the fetched blob, so a module reporting a small topology size but large section sizes makes the offsets point past the allocation, and parsing reads out of bounds. Reject a topology whose section sizes do not fit within the fetched size before it is parsed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-24

Last Modified

2026-09-25

Generated

2026-09-25

AI Q&A

2026-09-24

EPSS Evaluated

N/A

NVD

CVE-2026-93280

EUVD

EUVD-2026-86152

Affected Vendors & Products

Vendor	Product	Version / Range
linux	kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a flaw in the greybus audio subsystem. A malicious module can provide a small topology blob size but large section sizes, causing the parser to read out of bounds memory when calculating offsets for controls, widgets, and routes. The fix ensures section sizes are checked against the fetched blob size before parsing.

Detection Guidance

This vulnerability is specific to the Linux kernel's greybus audio subsystem and requires kernel-level inspection. Detection involves checking kernel logs for out-of-bounds read errors or verifying if your kernel version includes the fix. Use commands like 'dmesg | grep -i greybus' or 'uname -a' to check kernel version and logs.

Impact Analysis

This vulnerability could allow an attacker with access to a vulnerable system to cause memory corruption, potentially leading to crashes, privilege escalation, or arbitrary code execution. It affects systems using the greybus audio subsystem with untrusted modules.

Compliance Impact

This vulnerability involves out-of-bounds memory access due to improper bounds checking in the Linux kernel's greybus audio subsystem. While it does not directly impact compliance with standards like GDPR or HIPAA, such vulnerabilities could potentially lead to unauthorized data access or system instability, which may indirectly affect compliance by compromising data integrity or availability.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for CVE-2026-93280. If immediate patching is not possible, disable the greybus audio module by blacklisting it or restricting module loading until the update is applied.

Hi! I’m here to help you understand CVE-2026-93280. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70