SMBUS Message Size Validation Vulnerability in Linux Kernel

CVE-2026-31627

What is CVE-2026-31627?

A vulnerability in the Linux kernel's i2c subsystem exists due to improper validation of the size of SMBUS messages. The first byte of the SMBUS message is intended to indicate its size, which must be verified to ensure it falls within the permissible range of 0 to I2C_SMBUS_BLOCK_MAX. Failing to perform this check could lead to unexpected behavior when processing the message, potentially causing integrity and stability issues in systems utilizing the i2c subsystem.

References