CVE-2026-98203Medium· 5.5▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: Input: soc_button_array - check btns_desc->package.count Check that btns_desc->package.count is not 0 before accessing btns_desc->package.elements[0].
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 7.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.2%
— → 5.5
none → medium
In the Linux kernel, the following vulnerability has been resolved:
Input: soc_button_array - check btns_desc->package.count
Check that btns_desc->package.count is not 0 before accessing btns_desc->package.elements[0].
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-98298High· 7.0In the Linux kernel, the following vulnerability has been resolved: dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() In mmp_pdma_prep_slave_sg(), for_each_sg() iterates the scatterlist putting each entry into 'sg', …
CVE-2026-80933High· 7.8wifi: mt76: mt7996: validate default EEPROM firmware size
CVE-2026-80972Medium· 5.5ALSA: aloop: Check card index validity at probe
CVE-2026-89673Medium· 5.5nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo
CVE-2026-98769High· 8.4kernel: usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (CVE-2026-98769)
CVE-2026-98615Medium· 4.4kernel: eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox (CVE-2026-98615)