CVE-2026-53022
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-06-24
Modified: 2026-11-06
First seen: 2026-11-06
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: bound enumeration string aggregation populate_enum_data() aggregates firmware-provided value-modifier and possible-value strings into fixed 512-byte struct members. The current code bounds each individual source string but then appends every string and separator with raw strcat() and no remaining-space check. Switch the aggregation loops to a bounded append helper and reject enumeration packages whose combined strings do not fit in the destination buffers. [ij: add include]
Affected Software (9)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | e8a60aa7404bfef37705da5607c97737073ac38d < 7b3dc1f764bf24eb99474a5de8173b0b43a8b071 |
| Linux | Linux | e8a60aa7404bfef37705da5607c97737073ac38d < 75c738d4f27fa18a2a033de153bd40302bde6a66 |
| Linux | Linux | e8a60aa7404bfef37705da5607c97737073ac38d < ba0843c1955864401295f7ba3b420afe19f2266d |
| Linux | Linux | e8a60aa7404bfef37705da5607c97737073ac38d < 5a04f9a36930792f6d64e28d43609e158d09b665 |
| Linux | Linux | e8a60aa7404bfef37705da5607c97737073ac38d < c5683ca4949a514fbe656c6d0d08c4c126e21db9 |
| Linux | Linux | e8a60aa7404bfef37705da5607c97737073ac38d < 90b118d264845f7aaf539ac49f7c75f1f29590e2 |
| Linux | Linux | e8a60aa7404bfef37705da5607c97737073ac38d < 3c34471c26abc52a37f5ad90949e2e4b8027eb14 |
| Linux | Linux | 5.11 |
| linux | linux_kernel | 5.11 – 5.15.209 |