CVE-2026-93046

A flaw was found in the Linux kernel's software node component. A local attacker could exploit a failing bounds check in the software_node_get_reference_args() function when an index of UINT_MAX is passed. This could lead to an out-of-bounds access in the property array, potentially resulting in memory corruption and system instability or denial of service.

Red Hat has rated this vulnerability as a Moderate severity flaw because exploitation requires authenticated local access and primarily results in a denial of service via system crashes. The defect resides within the kernel core driver property handling mechanism, limiting direct exposure to local execution contexts interacting with software nodes. Because the vulnerability cannot be triggered remotely and does not directly facilitate privilege escalation, the primary risk remains restricted to host availability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.