CVE Database›Document archive›CVE-2026-64085

CVE-2026-64085

kernel: hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's pmbus/adm1266 driver, which is responsible for hardware monitoring. This vulnerability occurs because the driver does not properly handle data sizes when reading blackbox records from a device. A malicious or malformed device could send more data than expected, causing a buffer overflow. This could lead to memory corruption within the kernel, potentially allowing a local attacker to escalate privileges or cause a system crash (Denial of Service).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')