CVE-2026-80649: firmware: arm_scmi: Fix OOB in scmi_power_name_get()

Published Aug 28, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

firmware: armscmi: Fix OOB in scmipowernameget()

scmipowernameget() does not validate the domain number passed by the external caller, which may lead to an out-of-bounds access.

Fix this by returning "unknown" for invalid domains, like scmiresetnameget() does.

Affected Software

1 affected component

Linux Linux kernel

Event History

Aug 28, 2026

CVE Published

via MITRE·06:48 AM

Data Sourced

via MITRE·06:48 AM

Description

Frequently Asked Questions

What must an attacker or triggering caller control to reach the vulnerable code?

The caller must be able to pass an invalid SCMI power domain number to scmi_power_name_get(). The vulnerability occurs because that externally supplied domain number was not validated before use.

What happens after applying the fix?

For an invalid power domain number, scmi_power_name_get() returns "unknown" instead of performing an out-of-bounds access.

How can I determine whether a system may be affected?

Review the Linux kernel source or applied stable updates for the referenced fixes. Systems whose scmi_power_name_get() does not validate externally supplied domain numbers and return "unknown" for invalid domains may be affected.

CVE-2026-80649: firmware: arm_scmi: Fix OOB in scmi_power_name_get()

Affected Software

Event History

Frequently Asked Questions

What must an attacker or triggering caller control to reach the vulnerable code?

What happens after applying the fix?

How can I determine whether a system may be affected?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker or triggering caller control to reach the vulnerable code?

What happens after applying the fix?

How can I determine whether a system may be affected?