CVE-2026-98155: accel/qaic: Address potential out-of-bounds read in resp_worker()
Published Sep 25, 2026
·Updated
accel/qaic: Address potential out-of-bounds read in respworker()
Affected Software
2 affected componentsFixes available
Linux Linux kernel
Microsoft azl3 kernel 6.6.157.1-1<6.6.158.1-1
6.6.158.1-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.158.1-1
Event History
Sep 25, 2026
CVE Published
via MITRE·10:36 AM
Data Sourced
via MITRE·10:36 AM
Description
Data Sourced
via NVD·11:17 AM
Description
Sep 28, 2026
Data Sourced
via Microsoft·06:44 AM
DescriptionSeverityWeaknessAffected Software
Oct 21, 2026
Event
via FIRST·03:23 PM
Frequently Asked Questions
1
What is required to trigger the issue?
The device must send a malformed wire message to the kernel's QAIC response worker. The reported failure modes include reading past the end of a slab allocation, infinite loops, and kernel panics.