CVE-2026-93046: software node: Fix software_node_get_reference_args() with index -1
In the Linux kernel, the following vulnerability has been resolved:
software node: Fix softwarenodegetreferenceargs() with index -1
The bounds check for the index passed to softwarenodegetreferenceargs() was failing when passed UINTMAX, this in turn would lead to an out of bound access in the property array. Fix the bound check to also cover the UINTMAX case.
Affected Software
Event History
Frequently Asked Questions
What input triggers the out-of-bounds access?
The issue is triggered when software_node_get_reference_args() receives an index of UINT_MAX, which corresponds to -1 when interpreted as an unsigned value. The prior bounds check did not reject this value before accessing the property array.
How can I determine whether a kernel contains the fix?
Check whether the kernel source includes one of the referenced stable commits: 6cde06887487b4febd14658c9a246616abcc0097, 0631384eadebc66d92d2dd72d57a0263c3877bee, or b2fa4e8c7e4a33e02e6aaa8f6df72f84cf4aed75. The fix updates the bounds check in software_node_get_reference_args() to cover the UINT_MAX case.