CVE-2026-93129

Source
https://cve.org/CVERecord?id=CVE-2026-93129
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93129.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-93129
Downstream
Related
Published
2026-09-17T16:11:32Z
Modified
2026-10-28T02:31:05Z
Summary
platform/x86: dell-wmi-base: Fix handling of ultra performance key
Details

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: dell-wmi-base: Fix handling of ultra performance key

The commit message of commit 5fbd827eb9c2 ("platform/x86: dell-wmi: Recognise or support new switches") states that the ultra performance key contains additional data after the type and code fields. The event data passed to dell_wmi_process_key() is already parsed, so "buffer" already starts after those two fields.

Use the correct index for accessing the first data field to avoid a potential buffer overread.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93129.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5fbd827eb9c224c33a5f263ee543a75fe957faa3
Fixed
30674a7bbf20311a0c4edd5edb9526ef1eecc692
Fixed
ace1a687ea9ea70d17e3089ca173acfa1ec24412
Fixed
16a82add1918d3aae1e0b68c0a983b6fc64f5062
Fixed
392c19faec6bf4cb72fb02322e2a61e198dd8f72
Fixed
adfd6846bea13667ff28f8aaf00c32fbd69825ab

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93129.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.57
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.6

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93129.json"