CVE-2026-98658
Received
Received - Intake
IIO Proximity Sensor AW96103 Firmware Length Validation Flaw
Vulnerability report for CVE-2026-98658, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-18
Last updated on: 2026-10-18
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
iio: proximity: aw96103: validate firmware data length
The firmware parser reads a length from the binary header and then uses
it to walk six-byte register/value entries. A truncated firmware image
can make the parser read beyond the copied firmware buffer. A value
smaller than the four-byte count field also underflows, producing a very
large length.
Read the little-endian field with get_unaligned_le32(), as previously
proposed by David Lechner. Validate the header size, reject an
underflowed length, ensure the resulting payload is contained in the
firmware image, and require it to contain whole register/value entries.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | 07b241262dcad07671c444ca955903325de28e9e |
| Linux | Linux | 07b241262dcad07671c444ca955903325de28e9e |
| Linux | Linux | 07b241262dcad07671c444ca955903325de28e9e |
| Linux | Linux | 07b241262dcad07671c444ca955903325de28e9e |
| Linux | Linux | 6.12 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
