CVE-2026-43005 Details
Description
In the Linux kernel, the following vulnerability has been resolved: hwmon: (tps53679) Fix array access with zero-length block read i2c_smbus_read_block_data() can return 0, indicating a zero-length read. When this happens, tps53679_identify_chip() accesses buf[ret - 1] which is buf[-1], reading one byte before the buffer on the stack. Fix by changing the check from "ret < 0" to "ret <= 0", treating a zero-length read as an error (-EIO), which prevents the out-of-bounds array access. Also fix a typo in the adjacent comment: "if present" instead of duplicate "if".
A vulnerability has been identified in the Linux kernel's TPS53679 hardware monitoring driver. The issue arises in the 'tps53679_identify_chip' function, where the 'i2c_smbus_read_block_data' function can return a zero-length read. This condition is not properly handled, leading to an out-of-bounds read from the buffer. The vulnerability has been addressed by modifying the length check to treat zero-length reads as an error, preventing the invalid array access.
Users can update to the latest version of the Linux kernel where this vulnerability has been fixed. The specific commit addressing this issue is '0e211f6aaa6a00fd0ee0c1eea5498f168c6725e6', which is included in the official Linux kernel repository.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0e211f6aaa6a00fd0ee0c1eea5498f168c6725e6 | kernel.org | Patch |
| https://git.kernel.org/stable/c/6999b4769e2a61c463158927102e8c07e3f69ba2 | kernel.org | Patch |
| https://git.kernel.org/stable/c/79b7e588399bb55f4c10bea6ca41b6c3b944d2bb | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.17.1, < 6.18.22 >= 6.19, < 6.19.12 6.17 - 7.0 rc1 7.0 rc2 7.0 rc3 7.0 rc4 7.0 rc5 7.0 rc6 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 12, 2026 | Initial Analysis | [email protected] |
| May 1, 2026 | New CVE Received | kernel.org |