CVE-2026-93129

A flaw was found in the Linux kernel's dell-wmi-base driver. This vulnerability occurs due to an incorrect index used when accessing data fields related to the ultra performance key, which can lead to a potential buffer over-read. A local attacker could potentially exploit this to read sensitive information or cause a denial of service.

This vulnerability has been rated as having a Low impact because exploitation is constrained to local environments on specific Dell hardware platforms and primarily poses a limited denial-of-service risk without enabling arbitrary code execution. The underlying driver is only active on Dell systems that process specific WMI hotkey events, leaving non-Dell hardware and virtualized guest instances unaffected. Furthermore, enterprise installations running Red Hat Enterprise Linux 8 and 9 do not ship the commit that introduced this behavior.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.