CVE-2026-98155

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read issue exists in the resp worker() function within the accel/qaic component. This occurs because the logic for handling DBC deactivation skipped the bounds checking code typically found in the decode message() function. A malformed wire message sent from the device could trigger this flaw, potentially leading to kernel panics, infinite loops, or reading memory beyond the slab allocation's end. Slab allocation refers to a memory management mechanism that caches objects of a specific size to improve performance.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.