CVE-2026-72241 (GCVE-0-2026-72241)
Vulnerability from cvelistv5
Published
2026-08-15 05:54
Modified
2026-08-17 05:10
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: leds: uleds: Fix potential buffer overread The name string supplied by userspace is not guaranteed to be null-terminated, so using strchr() on it might result in a buffer overread. The same thing will happen when said string is used by the LED class device. Fix this by using strnchr() instead and explicitly check that the name string is properly null-terminated.
References
Impacted products
Vendor Product Version
Linux Linux Version: e381322b0190c1253d347de3f28b5c37756fb651
Version: e381322b0190c1253d347de3f28b5c37756fb651
Version: e381322b0190c1253d347de3f28b5c37756fb651
Version: e381322b0190c1253d347de3f28b5c37756fb651
Version: e381322b0190c1253d347de3f28b5c37756fb651
Version: e381322b0190c1253d347de3f28b5c37756fb651
Version: e381322b0190c1253d347de3f28b5c37756fb651
Version: e381322b0190c1253d347de3f28b5c37756fb651
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/leds/uleds.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "a84c59121dfdc7b324f72dc5012aa8fe5e7d2d7b",
              "status": "affected",
              "version": "e381322b0190c1253d347de3f28b5c37756fb651",
              "versionType": "git"
            },
            {
              "lessThan": "5bb89e23729f3a59592d699a437bb001f24b8f67",
              "status": "affected",
              "version": "e381322b0190c1253d347de3f28b5c37756fb651",
              "versionType": "git"
            },
            {
              "lessThan": "5ad6f6c9209e5777b896def9876708853ae26d0d",
              "status": "affected",
              "version": "e381322b0190c1253d347de3f28b5c37756fb651",
              "versionType": "git"
            },
            {
              "lessThan": "8bf529571cca60fb8af65d6d034bdbbc99a9127c",
              "status": "affected",
              "version": "e381322b0190c1253d347de3f28b5c37756fb651",
              "versionType": "git"
            },
            {
              "lessThan": "a91ac9fdac7385cbc98aeae55b4e5302125497a2",
              "status": "affected",
              "version": "e381322b0190c1253d347de3f28b5c37756fb651",
              "versionType": "git"
            },
            {
              "lessThan": "6dd51d84a9502553e58beade72823258871b8111",
              "status": "affected",
              "version": "e381322b0190c1253d347de3f28b5c37756fb651",
              "versionType": "git"
            },
            {
              "lessThan": "263ccdd627caeda6e980ed3c6e32bb4fd6b380b1",
              "status": "affected",
              "version": "e381322b0190c1253d347de3f28b5c37756fb651",
              "versionType": "git"
            },
            {
              "lessThan": "c19fe864f667afc49d1391d764e20b66555bcf7a",
              "status": "affected",
              "version": "e381322b0190c1253d347de3f28b5c37756fb651",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/leds/uleds.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.10"
            },
            {
              "lessThan": "4.10",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.261",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.212",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.178",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.145",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.97",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.40",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.261",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.212",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.178",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.145",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.97",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.40",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.5",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "4.10",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nleds: uleds: Fix potential buffer overread\n\nThe name string supplied by userspace is not guaranteed to be\nnull-terminated, so using strchr() on it might result in a buffer\noverread. The same thing will happen when said string is used by\nthe LED class device.\n\nFix this by using strnchr() instead and explicitly check that\nthe name string is properly null-terminated."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T05:10:59.303Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/a84c59121dfdc7b324f72dc5012aa8fe5e7d2d7b"
        },
        {
          "url": "https://git.kernel.org/stable/c/5bb89e23729f3a59592d699a437bb001f24b8f67"
        },
        {
          "url": "https://git.kernel.org/stable/c/5ad6f6c9209e5777b896def9876708853ae26d0d"
        },
        {
          "url": "https://git.kernel.org/stable/c/8bf529571cca60fb8af65d6d034bdbbc99a9127c"
        },
        {
          "url": "https://git.kernel.org/stable/c/a91ac9fdac7385cbc98aeae55b4e5302125497a2"
        },
        {
          "url": "https://git.kernel.org/stable/c/6dd51d84a9502553e58beade72823258871b8111"
        },
        {
          "url": "https://git.kernel.org/stable/c/263ccdd627caeda6e980ed3c6e32bb4fd6b380b1"
        },
        {
          "url": "https://git.kernel.org/stable/c/c19fe864f667afc49d1391d764e20b66555bcf7a"
        }
      ],
      "title": "leds: uleds: Fix potential buffer overread",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-72241",
    "datePublished": "2026-08-15T05:54:29.640Z",
    "dateReserved": "2026-08-09T03:40:39.914Z",
    "dateUpdated": "2026-08-17T05:10:59.303Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.