CVE-2026-98892

A flaw was found in the Linux kernel's ARM System Control and Management Interface (SCMI) firmware driver. The notification handler fails to properly validate the size of incoming base error event payloads before copying the report array. A compromised or malfunctioning firmware interface can provide a truncated payload, triggering an out-of-bounds memory read. This issue may result in a system crash, leading to a denial of service (DoS), or potentially expose sensitive kernel memory.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.