Buffer Overflow Vulnerability in Linux Kernel Affecting IIO Chemical Drivers

CVE-2026-43476

What is CVE-2026-43476?

In the Linux kernel, a vulnerability was identified in the IIO chemical drivers specifically within the sps30_i2c_read_meas() function. This vulnerability arises from an incorrect evaluation of buffer size, where 'sizeof(num)' unexpectedly returns a size of 8 bytes on 64-bit systems instead of the intended 4 bytes associated with the __be32 element type. The resolution involves utilizing 'sizeof(*meas)' to ensure the buffer matches the correct element type, addressing potential buffer overflow issues and improving the overall security of the IIO subsystem.

References