CVE-2026-90833

The simulated EEPROM driver validated access ranges in eepromrangeisvalid drivers/eeprom/eepromsimulator.c with a single test, offset + len size. Because offset is a signed offt and len an unsigned sizet of the same rank, the addition is evaluated in unsigned arithmetic: a negative offset combine...