CVE-2026-64084

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read and write issue exists in the adm1266 gpio get multiple() function. The function incorrectly uses the PMBus command code ADM1266 PDIO STATUS as an upper bound for iterating through the PDIO portion of a caller-supplied mask instead of using the actual number of PDIO pins. This causes the iteration to read beyond the end of the mask on the caller's stack. If a set bit is encountered in this out-of-bounds range, it triggers a set bit(gpio nr, bits) call that writes past the end of the caller-supplied bits array.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.