CVE-2026-31627
kernel: Linux kernel: i2c s3c24xx driver arbitrary code execution via SMBUS message size validation flaw
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · April 24, 2026
Updated · August 20, 2026
Description
A flaw was found in the Linux kernel's i2c s3c24xx driver. The driver fails to properly validate the size of incoming SMBUS (System Management Bus) messages, specifically the first byte which indicates the message length. A local attacker with low privileges could exploit this by sending a malformed SMBUS message, potentially leading to memory corruption, which could result in a denial of service (system crash) or arbitrary code execution.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-787 · Out-of-bounds Write