CVE intelligence

CVE-2026-97503

Vulnerability intelligence

Published Sep 24, 2026Sources checked Nov 12, 2026

N/ACVSS not listedScore unavailable

What this means

Review the available evidence

CVE-2026-97503. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.

What to do next

Vendor revision: Nov 7, 2026

Release Notes

Vendor-listed releases

CISA KEVNot listedBased on the latest collected catalog

EPSS0.2%Estimated 30-day exploitation probability

Ransomware useNot markedCISA KEV ransomware field

Threat actors0Source-linked actor relationships

Overview

In the Linux kernel, the following vulnerability has been resolved:

genirq/proc: Size interrupt directory names for 10-digit interrupt numbers

/proc/irq/<n>/ directory names are built in `char name[10]` buffers with `sprintf(name, "%u", irq)`.

Ten-digit IRQ numbers already need 11 bytes including the trailing NUL, and current sparse-IRQ configurations allow interrupt numbers in that range.

Size the temporary name buffer for the current decimal form and switch to bounded formatting when creating or removing the proc entry.

Source: NVD