CVE-2026-93055EPSS p6.5%
CVE-2026-93055CVE-2026-93055
Description
In the Linux kernel, the following vulnerability has been resolved:
UDF symlink pathComponent header OOB read
udf_symlink_filler() can enter udf_pc_to_char() with a partial pathComponent header.
Validate that enough input remains for a complete pathComponent header
before accessing it. Reject malformed symlink data that would otherwise
make udf_pc_to_char() perform an out-of-bounds read.
Scoring
| EPSS | 0.18% probability of exploitation · percentile 6.5% · 2026-10-05T12:00:23Z |
| Last modified | 2026-09-17 |