CVE-2026-81017

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: sensorhub: Bound the EC-reported sensor number Each EC FIFO event carries an 8-bit sensor number in-sensornum. crosecsensorhubringhandler validates the FIFO event count, the per-read count and the ring bound, but...

CVE-2026-81017

CVE-2026-81017 affects the Linux kernel's Chrome OS sensorhub driver (cros_ec_sensorhub). The root cause is a missing bounds check: cros_ec_sensorhub_ring_handler() does not validate the 8-bit sensor number carried by each EC FIFO event before cros_ec_sensor_ring_process_event() uses it to index ...