CVE-2026-64083

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the hwmon module specifically within the pmbus/adm1266 driver. The functions adm1266 gpio get() and adm1266 gpio get multiple() fail to verify the length of the data returned by i2c smbus read block data(). If a device returns a short response (0 or 1 byte) due to firmware glitches, bus errors, or hostile hardware, the driver uses uninitialized stack memory to compose the pin-status word. This information is then leaked to userspace via gpiolib through sysfs and character device ioctls.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.