sps30_i2c_read_meas Heap Buffer Overflow DoS

The vulnerability of the sps30i2creadmeas function in the drivers/iio/chemical/sps30i2c.c module of various types of embedded sensors in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...

CVE-2026-43476: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sps30i2c: fix buffer size in sps30i2creadmeas sizeofnum evaluates to sizeofsizet 8 bytes on 64-bit instead of the intended be32 element size 4 bytes. Use sizeofmeas to correctly match the buffer element type...