In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Validate SENSOR_UPDATE payload size SENSOR_UPDATE carries… (CVE-2026-98893)

The Linux kernel's arm_scmi firmware component processes SENSOR_UPDATE messages that include one or more sensor readings following a fixed notification header. Previously, the parser derived the expected count of sensor readings from the sensor description but did not verify that the actual payload contained the full set of readings before parsing. This lack of validation could lead to improper handling of truncated payloads. The vulnerability was resolved by implementing a check that rejects truncated update notifications prior to parsing the variable-length array of sensor readings.

The vulnerability could allow the kernel to process incomplete SENSOR_UPDATE payloads, which may lead to undefined behavior or errors in sensor data handling. The exact impact is not detailed in the provided information, and no known exploits are reported in the wild.

A fix has been applied to the Linux kernel to validate SENSOR_UPDATE payload sizes and reject truncated notifications. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory for current remediation guidance.