CVE-2026-80649

A flaw was found in the Linux kernel's System Control and Management Interface (SCMI) power management. The scmi_power_name_get() function fails to validate the domain number provided by an external caller. This oversight can lead to an out-of-bounds access, potentially allowing an attacker to read or write to unauthorized memory locations, which could result in system instability or information disclosure.

A flaw of moderate impact was found in the Linux kernel's ARM System Control and Management Interface (SCMI) power management implementation. The scmi_power_name_get() function does not validate the power domain number provided by an external caller before using it as an index, which can result in an out-of-bounds memory access in the kernel. A local attacker able to reach this code path could cause a kernel panic, resulting in a denial of service. The Red Hat severity of moderate (CVSS 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) reflects an availability-only impact and is lower than the upstream CVEORG score of 7.8, which assumes high confidentiality and integrity impacts that the flaw's own evidence does not support. All Red Hat Enterprise Linux and Red Hat In-Vehicle OS kernel and kernel-rt streams listed in this record are marked not affected because the vulnerable code is not present in the shipped kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.