CVE Database›Document archive›CVE-2026-43005

CVE-2026-43005

kernel: hwmon: (tps53679) Fix array access with zero-length block read

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 1, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's tps53679 hwmon driver. When the i2c_smbus_read_block_data() function returns a zero-length read, the tps53679_identify_chip() function attempts to access memory before the allocated buffer. This out-of-bounds read could lead to information disclosure or a denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-786 · Access of Memory Location Before Start of Buffer