In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Fix OOB in scmi_power_name_get()

scmi_power_name_get() does not validate the domain number passed by the
external caller, which may lead to an out-of-bounds access.

Fix this by returning "unknown" for invalid domains, like
scmi_reset_name_get() does.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
76a6550990e296a7acbb4d33201c9740be912a8c affected < 01613f5e4ff6c080260615392338e92e261d109b
76a6550990e296a7acbb4d33201c9740be912a8c affected < ca94597440fa546e56293abe9d0af6c73535d44e
76a6550990e296a7acbb4d33201c9740be912a8c affected < 30aa348494531adfb043b2e883afc0439e5fcdca
76a6550990e296a7acbb4d33201c9740be912a8c affected < 0db2bb3c948ef8b7364768554d6ab5e1544dc441
76a6550990e296a7acbb4d33201c9740be912a8c affected < 11daac2817dca75e3eabb2050bc620c29e686fcd
76a6550990e296a7acbb4d33201c9740be912a8c affected < 11bb771f3c55b4cef3879e69da4ddecd6085569c
76a6550990e296a7acbb4d33201c9740be912a8c affected < f9ef3f66f4b18078e464b7606f9497e4dbeb9905
Linux Linux affected
Version Status Constraints
4.17 affected —
0 unaffected < 4.17
5.15.212 unaffected ≤ 5.15.*
6.1.178 unaffected ≤ 6.1.*
6.6.145 unaffected ≤ 6.6.*
6.12.97 unaffected ≤ 6.12.*
6.18.40 unaffected ≤ 6.18.*
7.1.5 unaffected ≤ 7.1.*
7.2 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/01613f5e4ff6c080260615392338e92e261d109b cve-icon
https://git.kernel.org/stable/c/0db2bb3c948ef8b7364768554d6ab5e1544dc441 cve-icon
https://git.kernel.org/stable/c/11bb771f3c55b4cef3879e69da4ddecd6085569c cve-icon
https://git.kernel.org/stable/c/11daac2817dca75e3eabb2050bc620c29e686fcd cve-icon
https://git.kernel.org/stable/c/30aa348494531adfb043b2e883afc0439e5fcdca cve-icon
https://git.kernel.org/stable/c/ca94597440fa546e56293abe9d0af6c73535d44e cve-icon
https://git.kernel.org/stable/c/f9ef3f66f4b18078e464b7606f9497e4dbeb9905 cve-icon
History

Fri, 28 Aug 2026 07:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix OOB in scmi_power_name_get() scmi_power_name_get() does not validate the domain number passed by the external caller, which may lead to an out-of-bounds access. Fix this by returning "unknown" for invalid domains, like scmi_reset_name_get() does.
Title firmware: arm_scmi: Fix OOB in scmi_power_name_get()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-28T06:48:58.203Z

Reserved: 2026-08-26T14:34:25.779Z

Link: CVE-2026-80649

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.