CVE intelligence
CVE-2026-98892
Vulnerability intelligence
Published Oct 23, 2026 Sources checked Oct 23, 2026
N/A CVSS not listed Score unavailable
What this means
Review the available evidence
CVE-2026-98892. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
What to do next Remediation and response
CISA KEV Not listed Based on the latest collected catalog
EPSS Unavailable No current score collected
Ransomware use Not marked CISA KEV ransomware field
Threat actors 0 Source-linked actor relationships
Overview
What is CVE-2026-98892? In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size
BASE_ERROR_EVENT carries a variable number of message reports, with the count encoded in error_status. The notification parser used that count without checking whether the received payload contained all reported entries.
Reject truncated payloads before copying the report array.
Source: NVD
Sources Check the original records SecurityAlert keeps CVSS, KEV, EPSS, vendor guidance, and actor links separate so you can see where each fact came from.