CVE-2026-93129: platform/x86: dell-wmi-base: Fix handling of ultra performance key
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: dell-wmi-base: Fix handling of ultra performance key
The commit message of commit 5fbd827eb9c2 ("platform/x86: dell-wmi: Recognise or support new switches") states that the ultra performance key contains additional data after the type and code fields. The event data passed to dellwmiprocesskey() is already parsed, so "buffer" already starts after those two fields.
Use the correct index for accessing the first data field to avoid a potential buffer overread.
Affected Software
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Systems running the Linux kernel with the dell-wmi-base driver are relevant when they process an ultra performance key event. The issue is in the driver's handling of that event data.
What must occur for the buffer overread to be reached?
The driver must process an ultra performance key event. The overread results from accessing the first event data field using an incorrect index after the event data has already been parsed.
How can I determine whether a fix is available in my kernel source?
Check whether the kernel source includes either referenced stable commit 392c19faec6bf4cb72fb02322e2a61e198dd8f72 or adfd6846bea13667ff28f8aaf00c32fbd69825ab. The corrected code uses the proper index for the first data field.