CVE Database›Document archive›CVE-2026-46286

CVE-2026-46286

kernel: leds: qcom-lpg: Check for array overflow when selecting the high resolution

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 8, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's qcom-lpg LED driver. This vulnerability, an array overflow, occurs when the driver attempts to select high-resolution values. Due to incorrect indexing, the system may read random data from memory, which could lead to information disclosure or unpredictable system behavior. This issue arises because a 3-bit register is used to index an array that only contains 5 values, allowing out-of-bounds reads.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-125 · Out-of-bounds Read