CVE-2026-80951

CVE-2026-80951 is an out-of-bounds write in the Linux kernel's i3c master svc driver. The function svc_i3c_master_handle_ibi() reads IBI payloads from the RX FIFO, but its loop is bounded by the hardware FIFO size rather than the per-slot max_payload_len . When a device sends more bytes than the ...

CVE-2024-49874 i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition

In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: Fix use after free vulnerability in svci3cmaster Driver Due to Race Condition In the svci3cmasterprobe function, &master-hjwork is bound with svci3cmasterhjwork, &master-ibiwork is bound with svci3cmasteribiwork...