CVE-2026-46001

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1

Description Two issues exist in the pt5161l read block data() function within the hwmon component. First, a buffer overrun occurs because the local buffer rbuf is declared with 24 bytes, while i2c smbus read block data() can return up to 32 bytes. Since the i2c-core copies data before the return value is checked, a device returning more than 24 bytes causes a stack overrun. Second, when retries are exhausted due to a length mismatch, i2c smbus read block data() returns a positive byte count. The function returns this value directly, leading callers to treat the operation as a success and process stale or incomplete buffer contents.

Recommendations For Linux kernel, at the moment, there is no information about a newer version that contains a fix for this vulnerability. Update openSUSE Tumbleweed to version kernel-devel-7.0.11-1.1.