CVE-2026-64083

A flaw was found in the Linux kernel's pmbus/adm1266 driver within the hwmon subsystem. The adm1266_gpio_get() and adm1266_gpio_get_multiple() functions fail to validate the length of responses from I2C block-read operations. A local user or a malicious I2C (Inter-Integrated Circuit) slave device can exploit this by providing a short block-read response. This vulnerability leads to the disclosure of small amounts of kernel stack memory, which can be accessed by userspace applications.