CVE-2026-93234

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the GUD protocol implementation. The gud connector add tv mode() function passes fixed-size TV mode name entries directly to drm mode create tv properties legacy(), which subsequently calls drm property add enum() and strlen(). If a device provides a mode name that is not NUL-terminated, strlen() reads beyond the allocated buffer. This occurs because the protocol requires each name to be NUL-terminated within the GUD CONNECTOR TV MODE NAME LEN limit.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.