CVE-2026-93272: linux

CVSS: UnknownReceived
AliasesUBUNTU-CVE-2026-93272DEBIAN-CVE-2026-93272
Published 24-09-2026Last modified 21-10-2026
Open JSON

Vulnerability summary

CVE-2026-93272 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 7.6% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.18%
0%100%
Low · Change unavailable
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
OPENSUSE-SU-2026:12074-1

Timeline

  1. 24-09-2026
    PublishedVulnerability first disclosed.
  2. 21-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3 The changes introduced to handle single power domain platforms have swapped the info pointer increment from num_pd_vregs to num_pds, which would shift the info pointer past the end of the array for pronto-v3, which does not list power domain regulators in vregs. This showed up as a difference between GCC- and LLVM-compiled kernels on SDM632 devices, where only with LLVM one would get the "regulator request with no identifier" error, because the out-of-bounds memory ended up being zeroed. Fix by skipping the increment when there are more power domains than regulators.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.18%

Chance of exploitation in the next 30 days

Percentile

8%

Versus all other CVEs

30-day change

Change unavailable

Change unavailable

25-09-202621-10-2026
EPSS score
0.18%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu157 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linuxAll versions (No fix recorded) | < 7.2.6-1
Linux1 product
  • linux≥ fef1e1487dea81c2b4560e393ba4b0be57e28d01, < 7abab59d6c99ba2b8101d6f44ad25159b1510724 | ≥ 69bb5b3ae348040e385113efba5bdc76396644d0, < e572cbb513cde53d90fb4729cad75056cd647ce3 | ≥ 65991ea8a6d1e68effdc01d95ebe39f1653f7b71, < 2e7e39bb81913feaac463b7add46bafdca06fbde | ≥ 65991ea8a6d1e68effdc01d95ebe39f1653f7b71, < bce6b48af3abf7468d12ef4933f21bd8c1d822e9 | ≥ 65991ea8a6d1e68effdc01d95ebe39f1653f7b71, < 3dbc90b9c22ea96e37bf55f6011e63b5123ec668 | 654c295f9079d2c7875172142022168e34c4e34e | 8d0d4c11cace475f1b07f98ee3d2bd334590e17b | 04a89c98810d2dba8187120c07fdb732aa40ca14 | ≥ 6.6.93, < 6.6.160 | ≥ 6.12.31, < 6.12.114 | ≥ 5.15.185, < 5.16 | ≥ 6.1.141, < 6.2 | ≥ 6.14.9, < 6.15 | 6.15

3 vendors · 159 products

References

8 links