CVE-2026-64495

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the Linux kernel within the bmg160 gyro driver. The functions bmg160 get filter() and bmg160 set filter() iterate through the bmg160 samp freq table[] array to find an entry matching a specific value. If no matching entry is found, the index exceeds the array bounds, leading to a buffer overflow when the code attempts to read the next slot. This issue can be triggered from userspace via the in anglvel filter low pass 3db frequency sysfs interface by providing a value not present in the bmg160 samp freq table[].filter array.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.