CVE-2026-53196

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A heap overflow exists in the get manuf info() function. The issue occurs because the function reads a number of bytes specified by the Size field from a device I2C EEPROM into a buffer allocated with kmalloc obj(), which has a fixed size of 10 bytes. While the Size field is validated in check i2c image() to ensure it does not exceed 16384 bytes, it is not checked against the actual destination buffer size. A malicious USB device can set the Size field to a value up to 16377, leading to a heap overflow of up to 16367 bytes. Additionally, the valid csum() function iterates through the buffer based on the Size field, further compounding the out-of-bounds access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.