ROS-20260925-73-0049

The vulnerability of the adm1266nvmemreadblackbox function in the drivers/hwmon/pmbus/adm1266.c driver for monitoring hardware in the Linux operating system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260925-73-0041

The vulnerability of the adm1266 gpiogetmultiple function in the drivers/hwmon/pmbus/adm1266.c file of the device monitoring driver for the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to...

SUSE CVE-2026-64086

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 include PEC byte in pmbusblockxfer read buffer adm1266pmbusblockxfer sets up the read transaction with .buf = data-readbuf, .len = ADM1266PMBUSBLOCKMAX + 2, but readbuf in struct adm1266data is declared as u8...

CVE-2026-64087

A flaw was found in the Linux kernel's pmbus/adm1266 driver. A malformed response from a hardware monitoring device could cause the driver to read beyond the allocated memory buffer. This out-of-bounds read can lead to system instability or denial of service...

CVE-2026-64085

A flaw was found in the Linux kernel's pmbus/adm1266 driver, which is responsible for hardware monitoring. This vulnerability occurs because the driver does not properly handle data sizes when reading blackbox records from a device. A malicious or malformed device could send more data than...

CVE-2026-64084

A flaw was found in the Linux kernel's hardware monitoring hwmon subsystem, specifically within the pmbus/adm1266 driver. This vulnerability involves an out-of-bounds memory access, where the system attempts to read or write data beyond the allocated memory region. A local attacker could exploit...

Linux Distros Unpatched Vulnerability : CVE-2026-64135

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 widen blackbox- info buffer to I2CSMBUSBLOCKMAX adm1266nvmemreadblackb...

CVE-2026-64135

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 widen blackbox-info buffer to I2CSMBUSBLOCKMAX adm1266nvmemreadblackbox declares a 5-byte stack buffer and passes it to i2csmbusreadblockdata to retrieve the 4-byte BLACKBOXINFO response. i2csmbusreadblockdat...

CVE-2026-64087 hwmon: (pmbus/adm1266) reject implausible blackbox record_count

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 reject implausible blackbox recordcount adm1266nvmemreadblackbox loops over a recordcount that comes straight from byte 3 of the BLACKBOXINFO response. The destination buffer is data-devmem, sized for the nvm...

EUVD-2026-45659

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 include PEC byte in pmbusblockxfer read buffer adm1266pmbusblockxfer sets up the read transaction with .buf = data-readbuf, .len = ADM1266PMBUSBLOCKMAX + 2, but readbuf in struct adm1266data is declared as u8...

CVE-2026-64086 hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 include PEC byte in pmbusblockxfer read buffer adm1266pmbusblockxfer sets up the read transaction with .buf = data-readbuf, .len = ADM1266PMBUSBLOCKMAX + 2, but readbuf in struct adm1266data is declared as u8...

CVE-2026-64083 hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 reject short block-read responses in the GPIO accessors adm1266gpioget and adm1266gpiogetmultiple both compose the pin-status word as pinsstatus = readbuf0 + readbuf1 8; right after i2csmbusreadblockdata,...

CVE-2026-64135: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 widen blackbox-info buffer to I2CSMBUSBLOCKMAX adm1266nvmemreadblackbox declares a 5-byte stack buffer and passes it to i2csmbusreadblockdata to retrieve the 4-byte BLACKBOXINFO response. i2csmbusreadblockdat...

CVE-2026-64087: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 reject implausible blackbox recordcount adm1266nvmemreadblackbox loops over a recordcount that comes straight from byte 3 of the BLACKBOXINFO response. The destination buffer is data-devmem, sized for the nvm...

PT-2026-61400

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hwmon module specifically within the pmbus/adm1266 driver. The functions adm1266 gpio get and adm1266 gpio get multiple fail to verify the length of the data...

PT-2026-61404

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the adm1266 nvmem read blackbox function within the hwmon pmbus/adm1266 module. The function processes a record count value obtained from the BLACKBOX INFO response...