CVE-2026-97503
Received Received - Intake

Linux Kernel procfs Interrupt Number Buffer Overflow

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers /proc/irq/<n>/ directory names are built in `char name[10]` buffers with `sprintf(name, "%u", irq)`. Ten-digit IRQ numbers already need 11 bytes including the trailing NUL, and current sparse-IRQ configurations allow interrupt numbers in that range. Size the temporary name buffer for the current decimal form and switch to bounded formatting when creating or removing the proc entry.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-97503
EUVD
EUVD-2026-86101

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a buffer overflow risk in the Linux kernel's handling of interrupt directory names in /proc/irq/. The issue occurs because the kernel uses a fixed 10-byte buffer to store interrupt numbers as strings, but 10-digit numbers require 11 bytes including the null terminator. This can lead to memory corruption when creating or removing proc entries for high-numbered interrupts.

Detection Guidance

This vulnerability is specific to the Linux kernel's handling of interrupt directory names in /proc/irq/. To detect it, check if your kernel version is affected by examining the /proc/version file and comparing it against patched versions. Look for kernel logs mentioning sparse-IRQ configurations or 10-digit interrupt numbers.

Impact Analysis

This vulnerability could allow local attackers to cause memory corruption, potentially leading to system crashes, privilege escalation, or other malicious activities. It primarily affects systems with sparse-IRQ configurations that generate high interrupt numbers.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this issue. If immediate updating is not possible, restrict access to /proc/irq/ directories or monitor them for unusual activity related to interrupt numbers.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97503. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart