Bug 2486478 (CVE-2026-46286) - CVE-2026-46286 kernel: leds: qcom-lpg: Check for array overflow when selecting the high resolution
Summary: CVE-2026-46286 kernel: leds: qcom-lpg: Check for array overflow when selectin...
Keywords:
Status: NEW
Alias: CVE-2026-46286
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
unspecified
unspecified
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-06-08 17:04 UTC by OSIDB Bzimport
Modified: 2026-06-22 09:53 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-06-08 17:04:10 UTC 
In the Linux kernel, the following vulnerability has been resolved:

leds: qcom-lpg: Check for array overflow when selecting the high resolution

When selecting the high resolution values from the array, FIELD_GET() is
used to pull from a 3 bit register, yet the array being indexed has only
5 values in it.  Odds are the hardware is sane, but just to be safe,
properly check before just overflowing and reading random data and then
setting up chip values based on that.
Comment 1 Keith Grant 2026-06-08 19:39:45 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026060843-CVE-2026-46286-b3d1@gregkh/T
Comment 2 imaginarydeft 2026-06-22 09:53:46 UTC 
It's great to hear Keith Grant's insights on Upstream Advisory:
https://lore.kernel.org/linux-cve-announce/2026060843-CVE-2026-46286-b3d1@gregkh/T 
https://scratchgamesonline.io
His sharing and topics truly offer fresh and impressive experiences.
Note You need to log in before you can comment on or make changes to this bug.