CVE-2026-64191

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the i2c-stub driver, a development and test tool. The stub xfer() function fails to validate the transfer length against I2C SMBUS BLOCK MAX when handling the I2C SMBUS I2C BLOCK DATA case. A local user with access to /dev/i2c-* can trigger a stack-out-of-bounds read or write by issuing an I2C SMBUS ioctl with a data->block[0] value greater than 32. This occurs because the driver implements .smbus xfer directly, bypassing the standard validation performed in i2c smbus xfer emulated().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.