CVE-2026-92478: scsi: ufs: core: Validate connected lane counts
Published Sep 17, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: core: Validate connected lane counts
The connected lane count is used by TX equalization code to index arrays sized by UFSMAXLANES. Reject zero and out-of-range RX or TX lane counts before they can be propagated.
Affected Software
1 affected component
Linux Kernel
Event History
Sep 17, 2026
CVE Published
via MITRE·04:09 PM
Data Sourced
via MITRE·04:09 PM
Description
Frequently Asked Questions
1
Which systems are relevant to this issue?
Systems using the Linux kernel UFS core are relevant, particularly where RX or TX connected lane counts are provided to the UFS stack. The issue concerns invalid zero or out-of-range lane counts reaching TX equalization handling.
2
Does the available information identify affected kernel versions?
No affected or fixed kernel version numbers are provided. The available references identify two stable kernel commits containing the resolution.