CVE-2026-43005

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds array access occurs in the tps53679 identify chip() function. This happens when the i2c smbus read block data() function returns 0, indicating a zero-length read, leading the system to access buf[-1] and read one byte before the buffer on the stack.

Recommendations Update the check in the affected code from ret < 0 to ret <= 0 to treat zero-length reads as an error (-EIO).