CVE-2026-0138

The LWIS kernel driver contains an out-of-bounds write vulnerability in the lwis_io_buffer_write function of lwis_io_buffer.c. The root cause is a lack of boundary checks on the offset and size_in_bytes fields from the user-provided lwis_io_entry structure during a memcpy operation into a dma-buf...