CVE-2026-92480

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the SCSI UFS core where string descriptors are not properly validated. The utf16s to utf8s() function expects a count of UTF-16 code units rather than bytes. Because the string descriptor length includes a two-byte header and the UTF-16 payload begins after it, passing the payload byte count can lead to an out-of-bounds read beyond the descriptor buffer. Additionally, copying bLength bytes from the pointer starting after the descriptor header can result in reading beyond the response buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.