CVE-2026-93287

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the SMBus block transfer handling where the length specified in data->block[0] is not validated early enough. This allows user-controlled oversized block lengths to reach driver callbacks and tracepoint memcpy calls without proper checks. This leads to two specific out-of-bounds (OOB) conditions: first, the trace smbus write() function may copy excessive data into a 34-byte event buffer; second, the stub xfer() function in the i2c-stub driver may access memory beyond the 34-byte union when processing I2C SMBUS I2C BLOCK DATA. The vulnerability is triggered via the i2c smbus xfer() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.