{"id":"CVE-2026-93129","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: dell-wmi-base: Fix handling of ultra performance key\n\nThe commit message of commit 5fbd827eb9c2 (\"platform/x86: dell-wmi: Recognise or support new switche…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: dell-wmi-base: Fix handling of ultra performance key\n\nThe commit message of commit 5fbd827eb9c2 (\"platform/x86: dell-wmi: Recognise or support new switche…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 5fbd827eb9c224c33a5f263ee543a75fe957faa3 < 392c19faec6bf4cb72fb02322e2a61e198dd8f72","Linux >= 5fbd827eb9c224c33a5f263ee543a75fe957faa3 < adfd6846bea13667ff28f8aaf00c32fbd69825ab","Linux 5.16"],"published":"2026-09-17","updated":"2026-10-15","sourceUpdated":"2026-10-15T11:18:05.890","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-93129","references":[{"url":"https://git.kernel.org/stable/c/16a82add1918d3aae1e0b68c0a983b6fc64f5062","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/392c19faec6bf4cb72fb02322e2a61e198dd8f72","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/adfd6846bea13667ff28f8aaf00c32fbd69825ab","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/30674a7bbf20311a0c4edd5edb9526ef1eecc692"},{"url":"https://git.kernel.org/stable/c/ace1a687ea9ea70d17e3089ca173acfa1ec24412"}],"tags":["nvd","cve.org"],"epss":0.00209,"epssPercentile":0.10942,"ingestedAt":"2026-09-17T16:21:47.748Z","slug":"CVE-2026-93129","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: dell-wmi-base: Fix handling of ultra performance key\n\nThe commit message of commit 5fbd827eb9c2 (\"platform/x86: dell-wmi: Recognise or support new switches\")\nstates that the ultra performance key contains additional data\nafter the type and code fields. The event data passed to\ndell_wmi_process_key() is already parsed, so \"buffer\" already\nstarts after those two fields.\n\nUse the correct index for accessing the first data field to avoid\na potential buffer overread.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}