Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-93280

greybus: audio: bound the topology section sizes against the fetched size

CVSS 8.8 HighEPSS 0.0032 · 25th percentile

Published by the CVE Program (CNA: Linux) at 24 Sept 2026, 15:52 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 184992e305f1de3a3d5fa446da3a2bc76be7c54a to before ba86de9f7b0d7903d2df5ea2373e34d8ca3fc43e git
  • affected 184992e305f1de3a3d5fa446da3a2bc76be7c54a to before dd5593aee0a0fb353e1164aff7b65e563fe1f232 git
  • affected 184992e305f1de3a3d5fa446da3a2bc76be7c54a to before 6f764363b3173d805be11e59a8f23ecee2d420d5 git
  • affected 184992e305f1de3a3d5fa446da3a2bc76be7c54a to before 52daf9de692ebac813d110eb1e677dc0e1f4a5ab git
  • affected 184992e305f1de3a3d5fa446da3a2bc76be7c54a to before d0f6eaba60705bacd9bb4ce48eab50ef3f546777 git
  • affected 184992e305f1de3a3d5fa446da3a2bc76be7c54a to before c9191f2e2f35f1209eb2dc24b31129dd47b48c16 git
  • affected 184992e305f1de3a3d5fa446da3a2bc76be7c54a to before cfcc5a41a9664eb68023aae4cd0d485b256bd7c7 git
  • affected 184992e305f1de3a3d5fa446da3a2bc76be7c54a to before 33d8c7b794d2a30637c9d3fcb478f1d3222bef1e git
Other versions: unaffected
Linux Linux
  • affected 4.9
  • unaffected before 4.9 semver
  • unaffected 5.10.270 to 5.10.*, inclusive semver
  • unaffected 5.15.221 to 5.15.*, inclusive semver
  • unaffected 6.1.188 to 6.1.*, inclusive semver
  • unaffected 6.6.157 to 6.6.*, inclusive semver
  • unaffected 6.12.110 to 6.12.*, inclusive semver
  • unaffected 6.18.52 to 6.18.*, inclusive semver
  • unaffected 7.2.6 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-93280
CNA
Linux
Tags
Published
24 Sept 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
8.8 High 3.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CNA (Linux)
  • CISA KEV Not listed.
  • EPSS 0.0032, the 25th percentile, on 12 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 24 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.