CVE-2026-31627 i2c: s3c24xx: check the size of the SMBUS message before using it

🗓️ 24 Apr 2026 14:42:48Reported by LinuxType

CVE-2026-31627: i2c s3c24xx validates SMBUS first byte against 0..I2C_SMBUS_BLOCK_MAX before processing.

Reporter	Title	Published	Views	Family All 132
ATTACKERKB	CVE-2026-31627	24 Apr 202614:42	–	attackerkb
BDU FSTEC	The vulnerability of the i2c_s3cirq_nextbyte() function in the drivers/i2c/busses/i2c-s3c2410.c file of the I2C driver for the Linux operating system’s hardware layer allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	25 Aug 202600:00	–	bdu_fstec
CBLMariner	CVE-2026-31627 affecting package kernel for versions less than 6.6.137.1-1	3 May 202620:52	–	cbl_mariner
Chainguard	CVE-2026-31627 vulnerabilities	1 May 202619:17	–	cgr
Circl	CVE-2026-31627	28 Apr 202605:00	–	circl
CNNVD	Linux kernel 安全漏洞	24 Apr 202600:00	–	cnnvd
CVE	CVE-2026-31627	24 Apr 202614:42	–	cve
Debian	[SECURITY] [DLA 4664-1] linux security update	3 Jul 202615:51	–	debian
Debian	[SECURITY] [DLA 4665-1] linux security update	3 Jul 202618:38	–	debian
Debian	[SECURITY] [DLA 4671-1] linux-6.1 security update	5 Jul 202618:24	–	debian

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/i2c/busses/i2c-s3c2410.c"
    ],
    "versions": [
      {
        "version": "85747311ecb6167c989093c64a13807366fdd3a9",
        "lessThan": "fd1650da24ed54c716aa9b69e9bbd8a662e492da",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "85747311ecb6167c989093c64a13807366fdd3a9",
        "lessThan": "8f756a5964396da0fc9e0db33253a5b85dbbcbb6",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "85747311ecb6167c989093c64a13807366fdd3a9",
        "lessThan": "2d262da4bca6fab96e2e709feb95b31b0a9a03a7",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "85747311ecb6167c989093c64a13807366fdd3a9",
        "lessThan": "fa00738ab30b07db1a43b9c85fc56b8cc3b7d197",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "85747311ecb6167c989093c64a13807366fdd3a9",
        "lessThan": "d87d5620125a03b1eadbd5df39748215d3db7ddb",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "85747311ecb6167c989093c64a13807366fdd3a9",
        "lessThan": "377fae22a137b6b89f3f32399a58c52cf2325416",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "85747311ecb6167c989093c64a13807366fdd3a9",
        "lessThan": "71b3c316b22c555d2769126a92b1244b15a9750d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "85747311ecb6167c989093c64a13807366fdd3a9",
        "lessThan": "aaaaec39ddbcd06770dca7f1adebc3b1242ebe7b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "85747311ecb6167c989093c64a13807366fdd3a9",
        "lessThan": "c0128c7157d639a931353ea344fb44aad6d6e17a",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/i2c/busses/i2c-s3c2410.c"
    ],
    "versions": [
      {
        "version": "3.10",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "3.10",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.258",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.209",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.175",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.136",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.83",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.24",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.19.14",
        "lessThanOrEqual": "6.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.1",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/fd1650da24ed54c716aa9b69e9bbd8a662e492da
git	www.git.kernel.org/stable/c/377fae22a137b6b89f3f32399a58c52cf2325416
git	www.git.kernel.org/stable/c/d87d5620125a03b1eadbd5df39748215d3db7ddb
git	www.git.kernel.org/stable/c/2d262da4bca6fab96e2e709feb95b31b0a9a03a7
git	www.git.kernel.org/stable/c/8f756a5964396da0fc9e0db33253a5b85dbbcbb6
git	www.git.kernel.org/stable/c/71b3c316b22c555d2769126a92b1244b15a9750d
git	www.git.kernel.org/stable/c/c0128c7157d639a931353ea344fb44aad6d6e17a
git	www.git.kernel.org/stable/c/aaaaec39ddbcd06770dca7f1adebc3b1242ebe7b
git	www.git.kernel.org/stable/c/fa00738ab30b07db1a43b9c85fc56b8cc3b7d197

05 Aug 2026 12:23Current

CVSS 3.17.8

EPSS0.00131