EUVD-2026-76254

In the Linux kernel, the following vulnerability has been resolved: w1: ds28e17: reject an oversize length on an I2C block read w1f19i2cmastertransfer is the masterxfer for the DS28E17 1-Wire to I2C bridge. On an I2CMRECVLEN read, it takes the length from the device. The downstream slave puts a...

CVE-2026-80931

In the Linux kernel , the DS28E17 1-Wire to I2C bridge driver (w1 subsystem) contains an out-of-bounds read in w1_f19_i2c_master_transfer(). During an I2C_M_RECV_LEN read, the device-controlled length byte (0–255) is used to determine how many bytes to read into a 34-byte buffer (I2C_SMBUS_BLOCK_...