CVE-2026-64191

A flaw was found in the Linux kernel's i2c-stub driver. A local user with access to the /dev/i2c-* device can exploit this vulnerability by issuing an I2C System Management Bus (SMBus) input/output control (ioctl) command with a specially crafted block transfer length. This invalid length can cause the driver to read or write beyond the allocated buffer, leading to a stack-out-of-bounds error and a system crash, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.