CVE-2026-93234: Linux kernel · drm/gud: validate TV mode names before creating enum property
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in eab46d9629807db1b5647d17227e16110a18227f : update Linux kernel when convenient.
Data as of 26 Oct 2026, 16:39 UTC
Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 11% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in eab46d9629807db1b5647d17227e16110a18227f, da1ea35fea67ad841f4ada28dd61b41be65e5437, 676f1fb3632bbc9ce83be7938e93fe6bfc9510fd +4
Exploitation evidence
Disclosed: evidence found.
CVE published 24 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade to a fixed release listed under Affected software.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
AI-suggested
A fix is available and has been applied in the Linux kernel. Users should update to a fixed version to prevent this vulnerability. The fix validates TV mode names before processing, rejecting malformed entries to avoid out-of-bounds reads.
Description
A vulnerability in the Linux kernel's drm/gud component involves improper validation of TV mode names returned by the GUD protocol. The flaw allows an out-of-bounds read when a TV mode name is not properly NUL-terminated, causing strlen() to read beyond the allocated buffer. The issue is fixed by validating the presence of a NUL terminator within each fixed-size TV mode name entry and rejecting malformed entries.
References
- git.kernel.org/stable/c/676f1fb3632bbc9ce83be7938e93fe6bfc9510fd (opens in a new tab)
- git.kernel.org/stable/c/06fcaf21c18ac88f57fee3803554f48c6026b95f (opens in a new tab)
- git.kernel.org/stable/c/082e378886547b5b1c4075ed307f7c68547868dc (opens in a new tab)
- git.kernel.org/stable/c/70cffc31a380b3eae45027101647aa94c242aa0e (opens in a new tab)
- git.kernel.org/stable/c/72a95df6bbc7d20c7af1e39d86b3e910cccd01ad (opens in a new tab)
- git.kernel.org/stable/c/eab46d9629807db1b5647d17227e16110a18227f (opens in a new tab)
- git.kernel.org/stable/c/da1ea35fea67ad841f4ada28dd61b41be65e5437 (opens in a new tab)