CVE-2026-80931

A flaw was found in the Linux kernel's w1: ds28e17 1-Wire to I2C bridge driver. A malicious I2C slave device can provide an oversized length during an I2C block read operation. This causes the driver to read beyond the allocated buffer, leading to an out-of-bounds read of up to 222 bytes. This...

PT-2026-90061

In the Linux kernel, the following vulnerability has been resolved: w1: ds28e17: reject an oversize length on an I2C block read w1 f19 i2c master transfer is the master xfer for the DS28E17 1-Wire to I2C bridge. On an I2C M RECV LEN read, it takes the length from the device. The downstream slave...