CVE-2026-64135

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A stack buffer overflow exists in the adm1266 nvmem read blackbox() function within the hwmon module. The function uses a 5-byte stack buffer when calling i2c smbus read block data() to retrieve the BLACKBOX INFO response. Because i2c smbus read block data() does not verify the caller's buffer size and instead copies a number of bytes based on the length byte returned by the slave device (up to I2C SMBUS BLOCK MAX, which is 32 bytes), a device returning a block length greater than 5 can trigger a buffer overflow.

Recommendations Update the Linux kernel to a version where the adm1266 nvmem read blackbox() local buffer is widened to I2C SMBUS BLOCK MAX to accommodate all well-formed SMBus block responses.