CVE-2026-72396

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the adm1275 probe() function where an out-of-bounds stack read can occur during device-name comparison. The function i2c smbus read block data() reads up to 32 bytes into the block buffer stack array without appending a null terminator. Consequently, when strncasecmp() compares the buffer against a known name, it may read past the valid bytes returned by the device into uninitialized stack memory if the returned string is shorter than the comparison string.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.