Is there a patch available for EUVD-2026-86986?

Yes, a patch is available for EUVD-2026-86986. Update the affected software to the latest version immediately.

Linux EUVD-2026-86986

| CVE-2026-98155

2026-09-25 Linux

GHSA-fp97-66mw-5q4h

Buffer Overflow Linux

View

Monitor Track and reassess. Why: No CVSS yet + weak signal (CWE or non-zero EPSS).

Patch available 0.2% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisCVE.org

In the Linux kernel, the following vulnerability has been resolved:

accel/qaic: Address potential out-of-bounds read in resp_worker()

Although 'commit 2feec5ae5df7 ("accel/qaic: Handle DBC deactivation if the owner went away")' fixes the scenario it was intended for by walking the message and only decoding QAIC_TRANS_DEACTIVATE_FROM_DEV, if present, it skipped over the bounds checking code that is included in decode_message(). This could lead to issues such as reading past the slab allocation's end, infinite loops or kernel panics. For those issues to happen, a malformed wire message is needed to be sent from the device.

Instead of duplicating the bounds checking code already present in decode_message(), use the function inside resp_worker().

Affected VersionsENISA

Linux 6.19.12 <6.20

Linux ee0180e77e6c8482644569632065411de844c515

Linux 6.6.134 <6.7

Linux 7.0

Linux patch: 6.18.53

Linux f403094d9075d7c565a3d81002b781c325cb3c07 <12deeade460d47031267256ba07add51cc7eabd0

Linux 6.12.81 <6.12.111

Linux 6.18.22 <6.18.53

Linux patch: 0

Linux 2dd67966f39a2abf8ccb4865031c722e40e01b7f

Linux patch: 7.2.7

Linux 08021f2d4a557d6491e3bcc288e96425f50aa3cf <f4b64488f3deca63f7fbc7d7c3835b2e668003f9

Linux patch: 6.12.111

Linux 2feec5ae5df785658924ab6bd91280dc3926507c <c72e81ee46bdd4c221114d6e9515e9b4647616d7

Linux patch: 7.3-rc2

Linux 2feec5ae5df785658924ab6bd91280dc3926507c <ab243f74ab4084ca5c8dec608cb5b0deb27db067

Affected Packages

euvd linux fix: 6.7, 6.12.111, 6.18.53, 6.20

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Know when the next one hits your stack

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Lifecycle Timeline

Patch available

Sep 25, 2026 - 12:02 EUVD

CVE Published

Sep 25, 2026 - 10:36 cve.org

UNKNOWN (no severity yet)

Threat Intelligence Overview

EPSS Score

0.2%

Top 96% exploitable

Data Quality

3 sources

Confidence: Low

EUVD

CVE.org

EPSS MSRC

VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity Not scored yet

CISA KEV No

Public POC No

EPSS 0.2%

Patch available Yes

Active threat No

Deciding rule

No CVSS yet + weak signal (CWE or non-zero EPSS)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

Attack Technique

Buffer Overflow HIGH

A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.