CVE-2026-98203
Linux: Input: soc_button_array - check btns_desc->package.count
CVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.18%Chance of exploitation activity in the next 30 days, higher than 7% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in42c7afc0e5f5b5e12e9689e9a9815b5824cf0efbAlso 8a70a192e3e5b3ccbeeaf149c931cf45b8e82155, 12d80e6351556cfecbdd09416e5e4c73d6ca08baCVE List
What fixes it
- 42c7afc0e5f5b5e12e9689e9a9815b5824cf0efbLinuxCVE List
- 8a70a192e3e5b3ccbeeaf149c931cf45b8e82155LinuxCVE List
- 12d80e6351556cfecbdd09416e5e4c73d6ca08baLinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
Input: soc_button_array - check btns_desc->package.count
Check that btns_desc->package.count is not 0 before accessing btns_desc->package.elements[0].
Text from CVE List
Affected versions 18
- Linuxaffected: 4c3362f44980aba8e1e69cd6970effbd9f17dc69 before c3a94bfedfa2e4c4d37d1181e8db1ab010f1321aCVE List
- Linuxaffected: 4c3362f44980aba8e1e69cd6970effbd9f17dc69 before ec0576dabd6bf4f6532c5f0a58c9bf57095e45a4CVE List
- Linuxaffected: 4c3362f44980aba8e1e69cd6970effbd9f17dc69 before c62c6944c680bc4ae188ca9045daada32fcd10ecCVE List
- Linuxaffected: 4c3362f44980aba8e1e69cd6970effbd9f17dc69 before 42c7afc0e5f5b5e12e9689e9a9815b5824cf0efbCVE List
- Linuxaffected: 4c3362f44980aba8e1e69cd6970effbd9f17dc69 before eb5563386fb8c5dbb55d902a71a0ce10e4f307ebCVE List
- Linuxaffected: 4c3362f44980aba8e1e69cd6970effbd9f17dc69 before 8a70a192e3e5b3ccbeeaf149c931cf45b8e82155CVE List
- Linuxaffected: 4c3362f44980aba8e1e69cd6970effbd9f17dc69 before 12d80e6351556cfecbdd09416e5e4c73d6ca08baCVE List
- Linuxaffected: 4c3362f44980aba8e1e69cd6970effbd9f17dc69 before fb5022278b6ea7f1838e3ef78028d5d5e3375f65CVE List
- Linuxaffected: 4.12CVE List
- Linuxunaffected: all versions before 4.12CVE List
- Linuxunaffected: 5.10.271 through 5.10.*CVE List
- Linuxunaffected: 5.15.222 through 5.15.*CVE List
- Linuxunaffected: 6.1.189 through 6.1.*CVE List
- Linuxunaffected: 6.6.158 through 6.6.*CVE List
- Linuxunaffected: 6.12.112 through 6.12.*CVE List
- Linuxunaffected: 6.18.54 through 6.18.*CVE List
- Linuxunaffected: 7.2.8 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List
References 8
- git.kernel.org/stable/c/c3a94bfedfa2e4c4d37d1181e8db1ab010f1321aReferencevia CVE List
- git.kernel.org/stable/c/ec0576dabd6bf4f6532c5f0a58c9bf57095e45a4Referencevia CVE List
- git.kernel.org/stable/c/c62c6944c680bc4ae188ca9045daada32fcd10ecReferencevia CVE List
- git.kernel.org/stable/c/42c7afc0e5f5b5e12e9689e9a9815b5824cf0efbReferencevia CVE List
- git.kernel.org/stable/c/eb5563386fb8c5dbb55d902a71a0ce10e4f307ebReferencevia CVE List
- git.kernel.org/stable/c/8a70a192e3e5b3ccbeeaf149c931cf45b8e82155Referencevia CVE List
- git.kernel.org/stable/c/12d80e6351556cfecbdd09416e5e4c73d6ca08baReferencevia CVE List
- git.kernel.org/stable/c/fb5022278b6ea7f1838e3ef78028d5d5e3375f65Referencevia CVE List