CVE-2026-93067

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the tc358767 bridge driver where the tc aux transfer() function fails to properly clamp the byte count reported by the controller in AUX BYTES back to the original request size. Because AUX BYTES can report up to 255 bytes, the tc aux read data() function may read up to 256 bytes into the 16-byte auxrdata stack buffer and subsequently into the caller buffer, leading to a buffer overrun.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.