CVE-2026-64135 hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 widen blackbox-info buffer to I2CSMBUSBLOCKMAX adm1266nvmemreadblackbox declares a 5-byte stack buffer and passes it to i2csmbusreadblockdata to retrieve the 4-byte BLACKBOXINFO response. i2csmbusreadblockdat...

EUVD-2026-45820

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 widen blackbox-info buffer to I2CSMBUSBLOCKMAX adm1266nvmemreadblackbox declares a 5-byte stack buffer and passes it to i2csmbusreadblockdata to retrieve the 4-byte BLACKBOXINFO response. i2csmbusreadblockdat...

CVE-2026-64087 hwmon: (pmbus/adm1266) reject implausible blackbox record_count

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 reject implausible blackbox recordcount adm1266nvmemreadblackbox loops over a recordcount that comes straight from byte 3 of the BLACKBOXINFO response. The destination buffer is data-devmem, sized for the nvm...

CVE-2026-64085

The CVE describes a Linux kernel hwmon issue (adm1266) where adm1266_pmbus_block_xfer() copies a device-supplied block payload into a caller buffer using msgs[1].buf[0] as length. The helper may write more than the protected ADM1266_BLACKBOX_SIZE (64 bytes), while the caller advances read_buff in...

CVE-2026-64086

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 include PEC byte in pmbusblockxfer read buffer adm1266pmbusblockxfer sets up the read transaction with .buf = data-readbuf, .len = ADM1266PMBUSBLOCKMAX + 2, but readbuf in struct adm1266data is declared as u8...

CVE-2026-64086

The CVE-2026-64086 issue affects the Linux kernel PMBUS adm1266 hwmon path. A read transaction for the pmbus_block_xfer path set .len to ADM1266_PMBUS_BLOCK_MAX + 2 while read_buf was declared as ADM1266_PMBUS_BLOCK_MAX + 1. For max-length block responses, this allowed writing 257 bytes into a 25...

EUVD-2026-45659

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 include PEC byte in pmbusblockxfer read buffer adm1266pmbusblockxfer sets up the read transaction with .buf = data-readbuf, .len = ADM1266PMBUSBLOCKMAX + 2, but readbuf in struct adm1266data is declared as u8...

CVE-2026-64086 hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 include PEC byte in pmbusblockxfer read buffer adm1266pmbusblockxfer sets up the read transaction with .buf = data-readbuf, .len = ADM1266PMBUSBLOCKMAX + 2, but readbuf in struct adm1266data is declared as u8...

CVE-2026-64085 hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 bounce blackbox records through a protocol-sized buffer adm1266pmbusblockxfer copies the device-supplied block payload into the caller-provided buffer using the device-supplied length: memcpydatar, &msgs1.buf...

CVE-2026-64083 hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 reject short block-read responses in the GPIO accessors adm1266gpioget and adm1266gpiogetmultiple both compose the pin-status word as pinsstatus = readbuf0 + readbuf1 8; right after i2csmbusreadblockdata,...

PT-2026-61404

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the adm1266 nvmem read blackbox function within the hwmon pmbus/adm1266 module. The function processes a record count value obtained from the BLACKBOX INFO response...

PT-2026-61402

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hwmon subsystem where the adm1266 pmbus block xfer function copies a device-supplied block payload into a caller-provided buffer using a length specified by the...

PT-2026-61403

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hwmon component specifically within the adm1266 pmbus block xfer function. The function configures a read transaction with a length that can exceed the allocated...

PT-2026-61400

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hwmon module specifically within the pmbus/adm1266 driver. The functions adm1266 gpio get and adm1266 gpio get multiple fail to verify the length of the data...

PT-2026-61401

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read and write issue exists in the adm1266 gpio get multiple function. The function incorrectly uses the PMBus command code ADM1266 PDIO STATUS as an upper bound for...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbuscore Fixed NULL pointer dereferencing. Pass i2cclient to pmbusisenabled to remove the assumption that a regulator device is passed in. This will fix the issue of NULL pointer dereferencing when called from pmbusgetfla...

OESA-2026-2314 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix possible wrong descriptor completion in llistabortdesc At the end of this function, d is the traversal cursor of flist, but the code complet...

SUSE CVE-2026-43380

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/q54sj108a2 fix stack overflow in debugfs read The q54sj108a2debugfsread function suffers from a stack buffer overflow due to incorrect arguments passed to bin2hex. The function currently passes 'data' as the...

CVE-2026-43380

A flaw was found in the Linux kernel's hwmon subsystem, specifically within the pmbus/q54sj108a2 driver. This vulnerability, a stack buffer overflow, occurs in the q54sj108a2debugfsread function due to incorrect arguments passed to the bin2hex function. This flaw allows data to be written past th...

EUVD-2026-28686

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/q54sj108a2 fix stack overflow in debugfs read The q54sj108a2debugfsread function suffers from a stack buffer overflow due to incorrect arguments passed to bin2hex. The function currently passes 'data' as the...