CVE-2026-93119

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A stack overflow exists in the ljca enumerate gpio() function. The function reads the bank num variable from a device and uses it to control a loop that writes data into the valid pin[] array. Because the valid pin[] array only has two entries and the existing checks do not properly bound bank num against the array size, a malicious or broken LJCA device can provide a bank num value (up to 9) that causes the loop to write beyond the array boundaries, resulting in a stack overflow.

Recommendations As a temporary workaround, restrict the connection of untrusted LJCA devices to the system. At the moment, there is no information about a newer version that contains a fix for this vulnerability.