CVE-2026-98088

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds array read occurs in the base assign reply queues() function within the mpt3sas SCSI driver. This happens because the dev to node() function can return NUMA NO NODE (-1) on systems lacking NUMA (Non-Uniform Memory Access) topology information for the PCI device, such as single-socket boards. When this value is passed to the cpumask of node() function, it attempts to index node to cpumask map[-1], leading to an out-of-bounds access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.