CVE-2026-80802

CVE-2026-80802 affects the Linux kernel's NFC FDP driver (nfc: fdp). The function fdp_nci_i2c_read() uses a u16 value from two device-supplied bytes as the count for i2c_master_recv() into a 261-byte on-stack buffer without validation. A malicious, counterfeit, or malfunctioning NFC controller (o...

EUVD-2026-71237

In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: bound the device-reported read length and fix an skb leak fdpncii2cread takes the next packet length from two device-supplied bytes and never validates it. The value is a u16 used as the i2cmasterrecv count into a...

CVE-2026-80768

CVE-2026-80768 is a stack-use-after-return write in the Linux kernel's HID ft260 driver . The race occurs between ft260_i2c_read(), which points dev->read_buf at a caller-supplied (often on-stack) buffer and waits up to five seconds for an I2C response, and ft260_raw_event(), an input/IRQ-path...

EUVD-2026-71411

In the Linux kernel, the following vulnerability has been resolved: HID: ft260: fix stack-use-after-return write in I2C read race ft260i2cread points dev-readbuf at a caller-supplied buffer often an on-stack variable, arms a completion and waits up to five seconds for the device to return the dat...

CVE-2026-80768

In the Linux kernel, the following vulnerability has been resolved: HID: ft260: fix stack-use-after-return write in I2C read race ft260i2cread points dev-readbuf at a caller-supplied buffer often an on-stack variable, arms a completion and waits up to five seconds for the device to return the dat...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100774)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100774 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Clamp HDMI HDCP2 rxidlist read to buffer size Why & How During HDCP 2.x repeater...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099957)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099957 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Clamp HDMI HDCP2 rxidlist read to buffer size Why & How During HDCP 2.x repeater...

CVE-2026-72481

In the Linux kernel, the following vulnerability has been resolved: iio: magnetometer: ak8975: fix potential kernel stack memory leak Currently in the AK8975 driver there are four instances where potential uninitialized kernel stack memory leaks can occur. If i2csmbusreadi2cblockdataoremulated...

CVE-2026-72479

In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: handle I2C read errors in mma8452read Currently, If i2csmbusreadi2cblockdata fails but mma8452setruntimepmstate succeeds, mma8452read returns 0. As a result, the caller mma8452readraw assumes the read was...

CVE-2026-72479

In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: handle I2C read errors in mma8452read Currently, If i2csmbusreadi2cblockdata fails but mma8452setruntimepmstate succeeds, mma8452read returns 0. As a result, the caller mma8452readraw assumes the read was...

UBUNTU-CVE-2026-72479

In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: handle I2C read errors in mma8452read Currently, If i2csmbusreadi2cblockdata fails but mma8452setruntimepmstate succeeds, mma8452read returns 0. As a result, the caller mma8452readraw assumes the read was...

UBUNTU-CVE-2026-72481

In the Linux kernel, the following vulnerability has been resolved: iio: magnetometer: ak8975: fix potential kernel stack memory leak Currently in the AK8975 driver there are four instances where potential uninitialized kernel stack memory leaks can occur. If i2csmbusreadi2cblockdataoremulated...

CVE-2026-72479

CVE-2026-72479 affects the Linux kernel IIO MMA8452 accelerometer driver. The issue occurs in mma8452_read() when an I2C read call to i2c_smbus_read_i2c_block_data() fails but mma8452_set_runtime_pm_state() succeeds; in that path, mma8452_read() returns 0, causing mma8452_read_raw() to use an uni...

EUVD-2026-59378

In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: handle I2C read errors in mma8452read Currently, If i2csmbusreadi2cblockdata fails but mma8452setruntimepmstate succeeds, mma8452read returns 0. As a result, the caller mma8452readraw assumes the read was...

PT-2026-72667

In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: handle I2C read errors in mma8452 read Currently, If i2c smbus read i2c block data fails but mma8452 set runtime pm state succeeds, mma8452 read returns 0. As a result, the caller mma8452 read raw assumes the...

CVE-2026-64270

CVE-2026-64270 affects the Linux kernel and stems from a stack-based overflow in the MMS114 I2C touch data handling. The code reads an I2C packet into a fixed-size on-stack buffer touch[10], but the device-reported packet_size (0x0F) is not bounded to the buffer, allowing up to 175 bytes to be wr...

Linux Distros Unpatched Vulnerability : CVE-2026-63934

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: gyro: itg3200: fix i2c read into the wrong stack location itg3200readallchannels takes be16 buf' as a parameter and fills the i2cmsg destination as char...

CVE-2026-63934

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: itg3200: fix i2c read into the wrong stack location itg3200readallchannels takes be16 buf' as a parameter and fills the i2cmsg destination as char &buf'. Since buf' is the parameter a pointer, &buf' is the address of t...

CVE-2026-63934

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: itg3200: fix i2c read into the wrong stack location itg3200readallchannels takes be16 buf' as a parameter and fills the i2cmsg destination as char &buf'. Since buf' is the parameter a pointer, &buf' is the address of t...

PT-2026-61251

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the itg3200 read all channels function where an incorrect memory address is used during an I2C read operation. The function incorrectly uses the address of the local...