What is CVE-2026-98893?

CVE-2026-98893 is a unscored severity Linux kernel vulnerability. CVE-2026-98893 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-98893?

CVE-2026-98893 has a CVSS score of pending NVD analysis out of 10, rated awaiting scoring severity.

Is there a patch available for CVE-2026-98893?

Yes, CVE-2026-98893 has been patched. Fixed versions include 5.15.222, 6.1.189, 6.6.158 and others.

Is CVE-2026-98893 actively exploited?

CVE-2026-98893 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-98893

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Validate SENSOR_UPDATE payload size SENSOR_UPDATE carries one or more sensor readings after the fixed notification header. The parser derives the expected reading count from the sensor description, but it did not verify that the received payload contains those entries before parsing them. Reject truncated update notifications before reading the variable array.

Package Linux Kernel

Published 2026-10-23

Last modified 2026-10-23

Patch available

Yes

Affected versions

Fixed in 5.15.222, 6.1.189, 6.6.158, 6.12.111, 6.18.53, 7.2 and their respective stable series.

Fixed in

✓ 5.15.222 5.15.x ✓ 6.1.189 6.1.x ✓ 6.6.158 6.6.x ✓ 6.12.111 6.12.x ✓ 6.18.53 6.18.x ✓ 7.2

References

6 total

Showing 5 of 6 references View all on NVD

Frequently asked questions

What is CVE-2026-98893?

CVE-2026-98893 is a unscored severity Linux kernel vulnerability . CVE-2026-98893 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
Is there a patch available for CVE-2026-98893?

Yes. CVE-2026-98893 has been patched. Fixed versions include 5.15.222, 6.1.189, 6.6.158 and others.
Is CVE-2026-98893 actively exploited?

No. CVE-2026-98893 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.