I2C Block Transfer Vulnerability in Linux Kernel by The Linux Foundation

CVE-2026-64191

What is CVE-2026-64191?

A vulnerability in the Linux kernel's I2C stub driver could allow a local user to perform unauthorized block transfers exceeding the safe length limits. The issue arises when the transfer length is specified incorrectly, leading to potential buffer overflows. Proper validation of transfer lengths against the defined limits is essential to maintain system integrity. Consequently, developers are advised to implement stringent checks and ensure that transfers with lengths greater than 32 bytes are rejected to prevent data corruption and potential exploits.

References