CVE-2026-64086

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the hwmon component specifically within the adm1266 pmbus block xfer() function. The function configures a read transaction with a length that can exceed the allocated size of the read buf array in the adm1266 data structure. When a max-length block response occurs, including a length byte and a Packet Error Code (PEC) byte, the i2c controller may write 257 bytes into a 256-byte buffer, resulting in a one-byte buffer overflow. Additionally, the PEC comparison logic may read a byte beyond the array boundaries.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.