CVE Database›Document archive›CVE-2026-64135

CVE-2026-64135

kernel: hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's pmbus/adm1266 driver. This vulnerability occurs because the adm1266_nvmem_read_blackbox() function uses a small, fixed-size buffer to read data from an I2C (Inter-Integrated Circuit) device. If the device sends more data than the buffer can hold, it causes a buffer overflow. A local attacker could exploit this flaw to trigger a denial of service (DoS) or potentially escalate their privileges on the system.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')