CVE-2026-63934

🗓️ 19 Jul 2026 14:55:32Reported by LinuxType

cve🔗 web.nvd.nist.gov👁 30 Views🌐 WEB

Fix i2c read writes into caller buffer in itg3200 gyro driver, preventing data leakage.

Reporter	Title	Published	Views	Family All 42
Cvelist	CVE-2026-63934 iio: gyro: itg3200: fix i2c read into the wrong stack location	19 Jul 202614:55	–	cvelist
Debian CVE	CVE-2026-63934	19 Jul 202614:55	–	debiancve
EUVD	EUVD-2026-45707	19 Jul 202614:55	–	euvd
NVD	CVE-2026-63934	19 Jul 202616:17	–	nvd
Tenable Nessus	openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21555-1)	13 Aug 202600:00	–	nessus
Tenable Nessus	Photon OS 5.0: Linux PHSA-2026-5.0-0895	26 Jun 202600:00	–	nessus
Tenable Nessus	Photon OS 5.0: Linux PHSA-2026-5.0-0926	24 Jul 202600:00	–	nessus
Tenable Nessus	Photon OS 5.0: Linux PHSA-2026-5.0-92-0895	10 Aug 202600:00	–	nessus
Tenable Nessus	Photon OS 5.0: Linux PHSA-2026-5.0-92-0926	10 Aug 202600:00	–	nessus
Tenable Nessus	SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3790-1)	27 Aug 202600:00	–	nessus

Vulners

CNA

Node

linux linux_kernelRange3.9–5.10.259

linux linux_kernelRange5.11.0–5.15.210

linux linux_kernelRange5.16.0–6.1.176

linux linux_kernelRange6.2.0–6.6.143

linux linux_kernelRange6.7.0–6.12.93

linux linux_kernelRange6.13.0–6.18.35

linux linux_kernelRange6.19.0–7.0.12

linux linux_kernelRange7.1.0≥

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/iio/gyro/itg3200_buffer.c"
    ],
    "versions": [
      {
        "version": "9dbf091da080508e9f632d307f357beb79a0766b",
        "lessThan": "90e809376b0f0d1ddec2eec954aecdd2a5b40b0e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9dbf091da080508e9f632d307f357beb79a0766b",
        "lessThan": "8654b5e2617819ff4f7c78071dfd0275e971a9b6",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9dbf091da080508e9f632d307f357beb79a0766b",
        "lessThan": "b64dd5f3b38911054cbcc570df617e3e8e75e562",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9dbf091da080508e9f632d307f357beb79a0766b",
        "lessThan": "31bbd4b87dd6701fa10e03ba7f6268e49e178d16",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9dbf091da080508e9f632d307f357beb79a0766b",
        "lessThan": "63203bd072b613c18c237b906b1c9d2dc4527337",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9dbf091da080508e9f632d307f357beb79a0766b",
        "lessThan": "15a0b3f33ffb6c78b3de6f69b026ceb09b973dd1",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9dbf091da080508e9f632d307f357beb79a0766b",
        "lessThan": "cfc3283859cfdeacadf80d5e6880bdf871ffeaa6",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9dbf091da080508e9f632d307f357beb79a0766b",
        "lessThan": "6bdc3023d62ed5c7d591f0eb27a5adb37fb892ae",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/iio/gyro/itg3200_buffer.c"
    ],
    "versions": [
      {
        "version": "3.9",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "3.9",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.259",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.210",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.176",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.143",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.93",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.35",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.12",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/8654b5e2617819ff4f7c78071dfd0275e971a9b6
git	www.git.kernel.org/stable/c/63203bd072b613c18c237b906b1c9d2dc4527337
git	www.git.kernel.org/stable/c/cfc3283859cfdeacadf80d5e6880bdf871ffeaa6
git	www.git.kernel.org/stable/c/6bdc3023d62ed5c7d591f0eb27a5adb37fb892ae
git	www.git.kernel.org/stable/c/b64dd5f3b38911054cbcc570df617e3e8e75e562
git	www.git.kernel.org/stable/c/15a0b3f33ffb6c78b3de6f69b026ceb09b973dd1
git	www.git.kernel.org/stable/c/31bbd4b87dd6701fa10e03ba7f6268e49e178d16
git	www.git.kernel.org/stable/c/90e809376b0f0d1ddec2eec954aecdd2a5b40b0e

Parameter	Position	Path	Description	CWE
caller scan buffer	path	/dev/iio:deviceX	Kernel vulnerability where i2c read writes into the caller's stack due to taking the address of the local pointer and a cast, leading to uninitialized data being exposed to userspace via /dev/iio:deviceX	CWE-200
itg3200_read_all_channels() parameter __be16 *buf	path	/dev/iio:deviceX	Kernel vulnerability where i2c read writes into the caller's stack due to taking the address of the local pointer and a cast, leading to uninitialized data being exposed to userspace via /dev/iio:deviceX	CWE-200

27 Jul 2026 17:44Current

5.6Medium risk

Vulners AI Score5.6

EPSS0.00211