CVE record · CVE-2026-93234

drm/gud: validate TV mode names before creating enum property

No CVSS scoreEPSS 0.0021 · 11th percentile

Published by the CVE Program (CNA: Linux) at 24 Sept 2026, 15:33 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 to before 676f1fb3632bbc9ce83be7938e93fe6bfc9510fd git
  • affected 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 to before 06fcaf21c18ac88f57fee3803554f48c6026b95f git
  • affected 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 to before 082e378886547b5b1c4075ed307f7c68547868dc git
  • affected 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 to before 70cffc31a380b3eae45027101647aa94c242aa0e git
  • affected 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 to before 72a95df6bbc7d20c7af1e39d86b3e910cccd01ad git
  • affected 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 to before eab46d9629807db1b5647d17227e16110a18227f git
  • affected 40e1a70b4aedf2859a1829991b48ef0ebe650bf2 to before da1ea35fea67ad841f4ada28dd61b41be65e5437 git
Other versions: unaffected
Linux Linux
  • affected 5.13
  • unaffected before 5.13 semver
  • unaffected 5.15.221 to 5.15.*, inclusive semver
  • unaffected 6.1.188 to 6.1.*, inclusive semver
  • unaffected 6.6.157 to 6.6.*, inclusive semver
  • unaffected 6.12.110 to 6.12.*, inclusive semver
  • unaffected 6.18.51 to 6.18.*, inclusive semver
  • unaffected 7.2.5 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-93234
CNA
Linux
Published
24 Sept 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0021, the 11th percentile, on 12 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 24 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.