VULNERABILITY INTELLIGENCE

CVE-2026-93055

EPSS probability0.18%

CISA KEVNot currently listed

Published2026-09-17

Last modified2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: UDF symlink pathComponent header OOB read udf_symlink_filler() can enter udf_pc_to_char() with a partial pathComponent header. Validate that enough input remains for a complete pathComponent header before accessing it. Reject malformed symlink data that would otherwise make udf_pc_to_char() perform an out-of-bounds read.