Is there a patch available for EUVD-2026-93115?

Yes, a patch is available for EUVD-2026-93115. Update the affected software to the latest version immediately.

Linux EUVD-2026-93115

| CVE-2026-98187

2026-10-06 Linux

GHSA-mr98-38q8-fvr3

Information Disclosure Linux

View

Monitor Track and reassess. Why: No CVSS yet + weak signal (CWE or non-zero EPSS).

Patch available 0.2% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisCVE.org

In the Linux kernel, the following vulnerability has been resolved:

wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST

The PDR_INTERFACE_LIST loop only checks that the record start is within the entry before reading an entire struct exp_if from it. A truncated trailing record makes the if_id/variant reads cross the entry boundary into the heap beyond the EEPROM buffer (verified with a KASAN reproducer of the loop). The variant also feeds the synth front-end selection, so this is not only a leak.

Advance only while a full record still fits in the entry.

Affected VersionsENISA

Linux patch: 5.15.222

Linux eff1a59c48e3c6a006eb4fe5f2e405a996f2259d <d8efd84f49379ed28624098821f80e992657d935

Linux eff1a59c48e3c6a006eb4fe5f2e405a996f2259d <70bf34b425fe549a4f6a8d50a319f8f05d1f91c9

Linux eff1a59c48e3c6a006eb4fe5f2e405a996f2259d <d44c1badc2dcb042985f7e37f4c448c84548b81f

Linux 2.6.24

Linux eff1a59c48e3c6a006eb4fe5f2e405a996f2259d <d82492fd0a3fb61963c236521852763238ad3898

Linux eff1a59c48e3c6a006eb4fe5f2e405a996f2259d <d2fb6b588dc5bbab4f603661e41cd60f0d931628

Linux patch: 7.3-rc4

Linux patch: 6.12.112

Linux patch: 6.6.158

Linux eff1a59c48e3c6a006eb4fe5f2e405a996f2259d <bc83c04be042f53869c315b8e1eb5f124959d1d7

Linux patch: 7.2.8

Linux patch: 6.1.189

Linux eff1a59c48e3c6a006eb4fe5f2e405a996f2259d <487f966421014de41e835bbce3feb30b35f4f729

Linux eff1a59c48e3c6a006eb4fe5f2e405a996f2259d <162dbe1c285a621eab6a9f2851086b63a0378928

Linux patch: 0

Linux patch: 6.18.54

Linux patch: 5.10.271

Affected Packages

euvd linux no fix

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Know when the next one hits your stack

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Lifecycle Timeline

Patch available

Oct 06, 2026 - 10:02 EUVD

CVE Published

Oct 06, 2026 - 08:44 cve.org

UNKNOWN (no severity yet)

Threat Intelligence Overview

EPSS Score

0.2%

Top 93% exploitable

Threat Intel

1 sources

Data Quality

4 sources

Confidence: Medium

EUVD

CVE.org

EPSS NEWS MSRC

VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity Not scored yet

CISA KEV No

Public POC No

EPSS 0.2%

Patch available Yes

Active threat No

Deciding rule

No CVSS yet + weak signal (CWE or non-zero EPSS)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

Attack Technique

Information Disclosure MEDIUM

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.