CVE-2026-43476

kernel: iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 13, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel, specifically within a module responsible for handling sensor data. This vulnerability is caused by an error in calculating the correct size for a data buffer. An attacker could potentially exploit this issue to corrupt memory, which might lead to the system becoming unresponsive (Denial of Service) or the unauthorized disclosure of sensitive information.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-131 · Incorrect Calculation of Buffer Size