← Back to the live CVE advisory feed

CVE-2026-93280: Product identification pending

Severity

8.8 (HIGH)

Patch status

Unknown

Published

2026-09-24T16:17:25.290

Modified

2026-09-25T05:17:01.627

Why it matters

High-severity vulnerability requiring prioritized review.

Recommended admin actions

• Review and patch based on exposure, asset criticality, and business impact.
• Compare installed versions against the affected version range in the advisory.

Technical summary

In the Linux kernel, the following vulnerability has been resolved: greybus: audio: bound the topology section sizes against the fetched size gb_audio_gb_get_topology() fetches a topology blob of a module-supplied size, and gbaudio_tplg_parse_data() then walks it by adding the module-supplied size_dais, size_controls and size_widgets fields to form the control, widget and route section offsets. Those le32 sizes are never checked against the fetched blob, so a module reporting a small topology size but large section sizes makes the offsets point past the allocation, and parsing reads out of bounds. Reject a topology whose section sizes do not fit within the fetched size before it is parsed.

View the official NVD record for CVE-2026-93280

CVE data is sourced from NVD/CNA records and optional enrichment. Validate against the vendor advisory before taking production action.