CVE-2026-93246

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the rvu register interrupts() function when setting MSI-X irq affinity. The function iterates through MSI-X vectors and uses strstr() to search for Mbox or FLR within the irq name buffer. Because irq name is a NAME SIZE buffer and not all slots are populated before the loop executes, strstr() may continue scanning past the buffer boundary until a NUL terminator is found. This can trigger a KASAN slab-out-of-bounds read during boot when debug options are enabled. KASAN (Kernel Address Sanitizer) is a dynamic memory error detector for the Linux kernel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.