CVE-2026-93054 (GCVE-0-2026-93054)

Vulnerability from cvelistv5 – Published: 2026-09-17 16:10 – Updated: 2026-09-18 17:55
VLAI
Title
uio: Fix stale info pointer in failed registration path
Summary
In the Linux kernel, the following vulnerability has been resolved: uio: Fix stale info pointer in failed registration path After device_add(), the UIO device is visible to userspace and /dev/uioX can be opened. If a later setup step fails, __uio_register_device() unwinds the device but leaves idev->info pointing at the caller-owned struct uio_info. That is unsafe when an opener races with the failed registration path. The open file keeps a reference to the uio_device, while the caller sees registration failure and may free its struct uio_info. Later file operations can then follow idev->info and dereference freed memory. Handle post-device_add() failures like unregister: remove UIO attributes while the info pointer is still valid, then clear idev->info under info_lock and wake existing waiters/async users before removing the device and minor. This makes already-open file descriptors observe the same "device gone" state as normal uio_unregister_device().
Severity
7 (High)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: a93e7b331568227500186a465fee3c2cb5dffd1f , < 63eaa7663335d482a8825c231213e312cacea567 (git)
Affected: a93e7b331568227500186a465fee3c2cb5dffd1f , < df4faf65194ec6c315a59be4c6749eaeb3009243 (git)
Affected: a93e7b331568227500186a465fee3c2cb5dffd1f , < 506b43dde5f9ac0068b1360e6b5dbee07fda59fb (git)
Affected: a93e7b331568227500186a465fee3c2cb5dffd1f , < 15340b00e665af805523b08515294a1aa1778151 (git)
Affected: a93e7b331568227500186a465fee3c2cb5dffd1f , < 234156f6c6d9ec35dc47abbcc3adc3c79fc6a5ac (git)
Affected: a93e7b331568227500186a465fee3c2cb5dffd1f , < 16695e9059d80ea6661e8399064b0c01f641dd8c (git)
Affected: a93e7b331568227500186a465fee3c2cb5dffd1f , < ec5bd6731183eb6f619140c9bef2ee11ed818c20 (git)
Affected: a93e7b331568227500186a465fee3c2cb5dffd1f , < 67b6fc084b034a91c3ec7907a3fed89a2450f30b (git)
Affected: 085d735c858934e5d5bfaedb1fc98bd9135e6ff1 (git)
Affected: 4.14.100 , < 4.15 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 4.18
Unaffected: 0 , < 4.18 (semver)
Unaffected: 5.10.270 , ≤ 5.10.* (semver)
Unaffected: 5.15.221 , ≤ 5.15.* (semver)
Unaffected: 6.1.188 , ≤ 6.1.* (semver)
Unaffected: 6.6.157 , ≤ 6.6.* (semver)
Unaffected: 6.12.110 , ≤ 6.12.* (semver)
Unaffected: 6.18.52 , ≤ 6.18.* (semver)
Unaffected: 7.2.6 , ≤ 7.2.* (semver)
Unaffected: 7.3-rc1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/uio/uio.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "63eaa7663335d482a8825c231213e312cacea567",
              "status": "affected",
              "version": "a93e7b331568227500186a465fee3c2cb5dffd1f",
              "versionType": "git"
            },
            {
              "lessThan": "df4faf65194ec6c315a59be4c6749eaeb3009243",
              "status": "affected",
              "version": "a93e7b331568227500186a465fee3c2cb5dffd1f",
              "versionType": "git"
            },
            {
              "lessThan": "506b43dde5f9ac0068b1360e6b5dbee07fda59fb",
              "status": "affected",
              "version": "a93e7b331568227500186a465fee3c2cb5dffd1f",
              "versionType": "git"
            },
            {
              "lessThan": "15340b00e665af805523b08515294a1aa1778151",
              "status": "affected",
              "version": "a93e7b331568227500186a465fee3c2cb5dffd1f",
              "versionType": "git"
            },
            {
              "lessThan": "234156f6c6d9ec35dc47abbcc3adc3c79fc6a5ac",
              "status": "affected",
              "version": "a93e7b331568227500186a465fee3c2cb5dffd1f",
              "versionType": "git"
            },
            {
              "lessThan": "16695e9059d80ea6661e8399064b0c01f641dd8c",
              "status": "affected",
              "version": "a93e7b331568227500186a465fee3c2cb5dffd1f",
              "versionType": "git"
            },
            {
              "lessThan": "ec5bd6731183eb6f619140c9bef2ee11ed818c20",
              "status": "affected",
              "version": "a93e7b331568227500186a465fee3c2cb5dffd1f",
              "versionType": "git"
            },
            {
              "lessThan": "67b6fc084b034a91c3ec7907a3fed89a2450f30b",
              "status": "affected",
              "version": "a93e7b331568227500186a465fee3c2cb5dffd1f",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "085d735c858934e5d5bfaedb1fc98bd9135e6ff1",
              "versionType": "git"
            },
            {
              "lessThan": "4.15",
              "status": "affected",
              "version": "4.14.100",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/uio/uio.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.18"
            },
            {
              "lessThan": "4.18",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.110",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.52",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.270",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.221",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.188",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.157",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.110",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.52",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2.6",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.3-rc1",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.14.100",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nuio: Fix stale info pointer in failed registration path\n\nAfter device_add(), the UIO device is visible to userspace and /dev/uioX\ncan be opened. If a later setup step fails, __uio_register_device()\nunwinds the device but leaves idev-\u003einfo pointing at the caller-owned\nstruct uio_info.\n\nThat is unsafe when an opener races with the failed registration path.\nThe open file keeps a reference to the uio_device, while the caller sees\nregistration failure and may free its struct uio_info. Later file\noperations can then follow idev-\u003einfo and dereference freed memory.\n\nHandle post-device_add() failures like unregister: remove UIO attributes\nwhile the info pointer is still valid, then clear idev-\u003einfo under\ninfo_lock and wake existing waiters/async users before removing the\ndevice and minor. This makes already-open file descriptors observe the\nsame \"device gone\" state as normal uio_unregister_device()."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - After device_add() in __uio_register_device(), the char device is opened via open(2) on /dev/uioN into uio_open(); the dangling idev-\u003einfo is then used by uio_write/uio_mmap/uio_release on that fd. Callers such as tcmu_configure_device() (configfs enable) and uio_pci_generic probe() register locally; no remote protocol carries the trigger.\nAC:H - The stale-info unwind runs only when uio_dev_add_attributes() (kobject_create_and_add/kobject_add/kobject_uevent for maps/portio) or request_threaded_irq() fails after device_add(). Those fail on -ENOMEM, kernfs errors, or IRQ setup failure the attacker cannot force; a successful register never leaves idev-\u003einfo set after the caller drops struct uio_info.\nPR:L - uio_open() has no capable() check, and uio_pci_generic installs no info-\u003eopen hook, so the racing open is gated only by /dev/uioN inode mode. Reasonable UIO deployments (DPDK udev, tcmu-runner) grant that node to a non-root account that can also write target_dev_enable_store (TCMU) or hold the fd across a failing probe.\nUI:N - The same actor can write target_dev_enable_store (echo 1 \u003e enable -\u003e tcmu_configure_device -\u003e uio_register_device) or bind uio_pci_generic while another thread open()s /dev/uioN and then mmap/write/close; no other user must mount media or confirm a prompt.\nS:U - The use-after-free is idev-\u003einfo in the host UIO core (uio_write/uio_mmap/uio_release) after the caller (e.g. devm unwind of uio_pci_generic\u0027s struct uio_pci_generic_dev) frees struct uio_info; impact stays in the host kernel, not a KVM/Xen, IOMMU, or sandbox escape.\nC:H - After the caller frees struct uio_info, uio_read and uio_mmap still treat the non-NULL idev-\u003einfo as live and read info-\u003eirq, info-\u003emem[], and related fields. Reclaiming that slab object gives an arbitrary kernel read through those file operations.\nI:H - uio_write() calls idev-\u003einfo-\u003eirqcontrol, uio_open() calls info-\u003eopen, and uio_release() calls info-\u003erelease on the freed uio_info; uio_mmap_physical() feeds info-\u003emem[].addr into remap_pfn_range(). Spraying the object hijacks those function pointers or the PFN map for an arbitrary write/CFI primitive.\nA:H - uio_write/uio_mmap/uio_release and uio_vma_fault dereference the freed idev-\u003einfo (and TCMU\u0027s tcmu_vma_fault uses info-\u003emem[].addr after vfree(mb_addr) on err_register), which oopses or panics the kernel even without a successful spray."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-18T17:55:48.391Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/63eaa7663335d482a8825c231213e312cacea567"
        },
        {
          "url": "https://git.kernel.org/stable/c/df4faf65194ec6c315a59be4c6749eaeb3009243"
        },
        {
          "url": "https://git.kernel.org/stable/c/506b43dde5f9ac0068b1360e6b5dbee07fda59fb"
        },
        {
          "url": "https://git.kernel.org/stable/c/15340b00e665af805523b08515294a1aa1778151"
        },
        {
          "url": "https://git.kernel.org/stable/c/234156f6c6d9ec35dc47abbcc3adc3c79fc6a5ac"
        },
        {
          "url": "https://git.kernel.org/stable/c/16695e9059d80ea6661e8399064b0c01f641dd8c"
        },
        {
          "url": "https://git.kernel.org/stable/c/ec5bd6731183eb6f619140c9bef2ee11ed818c20"
        },
        {
          "url": "https://git.kernel.org/stable/c/67b6fc084b034a91c3ec7907a3fed89a2450f30b"
        }
      ],
      "title": "uio: Fix stale info pointer in failed registration path",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-93054",
    "datePublished": "2026-09-17T16:10:43.104Z",
    "dateReserved": "2026-09-17T15:57:05.658Z",
    "dateUpdated": "2026-09-18T17:55:48.391Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-93054",
      "date": "2026-09-29",
      "epss": "0.00156",
      "percentile": "0.0402"
    },
    "microsoft_vex": {
      "current_release_date": "2026-09-23T02:00:05.000Z",
      "cve": "CVE-2026-93054",
      "id": "msrc_CVE-2026-93054",
      "initial_release_date": "2026-09-19T01:13:15.000Z",
      "product_status:known_affected": "2",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "uio: Fix stale info pointer in failed registration path",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-93054.json",
      "version": "2"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "drivers/uio/uio.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "63eaa7663335d482a8825c231213e312cacea567",
                    "status": "affected",
                    "version": "a93e7b331568227500186a465fee3c2cb5dffd1f",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "df4faf65194ec6c315a59be4c6749eaeb3009243",
                    "status": "affected",
                    "version": "a93e7b331568227500186a465fee3c2cb5dffd1f",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "506b43dde5f9ac0068b1360e6b5dbee07fda59fb",
                    "status": "affected",
                    "version": "a93e7b331568227500186a465fee3c2cb5dffd1f",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "15340b00e665af805523b08515294a1aa1778151",
                    "status": "affected",
                    "version": "a93e7b331568227500186a465fee3c2cb5dffd1f",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "234156f6c6d9ec35dc47abbcc3adc3c79fc6a5ac",
                    "status": "affected",
                    "version": "a93e7b331568227500186a465fee3c2cb5dffd1f",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "16695e9059d80ea6661e8399064b0c01f641dd8c",
                    "status": "affected",
                    "version": "a93e7b331568227500186a465fee3c2cb5dffd1f",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "ec5bd6731183eb6f619140c9bef2ee11ed818c20",
                    "status": "affected",
                    "version": "a93e7b331568227500186a465fee3c2cb5dffd1f",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "67b6fc084b034a91c3ec7907a3fed89a2450f30b",
                    "status": "affected",
                    "version": "a93e7b331568227500186a465fee3c2cb5dffd1f",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "085d735c858934e5d5bfaedb1fc98bd9135e6ff1",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "4.15",
                    "status": "affected",
                    "version": "4.14.100",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "drivers/uio/uio.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "4.18"
                  },
                  {
                    "lessThan": "4.18",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.270",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.221",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.188",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.157",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.110",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.52",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.2.*",
                    "status": "unaffected",
                    "version": "7.2.6",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.3-rc1",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nuio: Fix stale info pointer in failed registration path\n\nAfter device_add(), the UIO device is visible to userspace and /dev/uioX\ncan be opened. If a later setup step fails, __uio_register_device()\nunwinds the device but leaves idev-\u003einfo pointing at the caller-owned\nstruct uio_info.\n\nThat is unsafe when an opener races with the failed registration path.\nThe open file keeps a reference to the uio_device, while the caller sees\nregistration failure and may free its struct uio_info. Later file\noperations can then follow idev-\u003einfo and dereference freed memory.\n\nHandle post-device_add() failures like unregister: remove UIO attributes\nwhile the info pointer is still valid, then clear idev-\u003einfo under\ninfo_lock and wake existing waiters/async users before removing the\ndevice and minor. This makes already-open file descriptors observe the\nsame \"device gone\" state as normal uio_unregister_device()."
          }
        ],
        "id": "CVE-2026-93054",
        "lastModified": "2026-09-18T18:18:19.403",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.0,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.0,
              "impactScore": 5.9,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-09-17T17:17:58.923",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/15340b00e665af805523b08515294a1aa1778151"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/16695e9059d80ea6661e8399064b0c01f641dd8c"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/234156f6c6d9ec35dc47abbcc3adc3c79fc6a5ac"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/506b43dde5f9ac0068b1360e6b5dbee07fda59fb"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/63eaa7663335d482a8825c231213e312cacea567"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/67b6fc084b034a91c3ec7907a3fed89a2450f30b"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/df4faf65194ec6c315a59be4c6749eaeb3009243"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/ec5bd6731183eb6f619140c9bef2ee11ed818c20"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Received"
      }
    },
    "suse_vex": {
      "aggregate_severity": "important",
      "current_release_date": "2026-09-22T16:25:32Z",
      "cve": "CVE-2026-93054",
      "id": "CVE-2026-93054",
      "initial_release_date": "2026-09-18T00:12:51Z",
      "product_status:known_affected": "176",
      "product_status:known_not_affected": "167",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-93054",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-93054.json",
      "version": "4"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.