5.5

CVE-2026-64083: linux

CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2026-64083DEBIAN-CVE-2026-64083
Published 19-07-2026Last modified 19-07-2026
Open JSON

Vulnerability summary

CVE-2026-64083 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.13% chance of exploitation in the next 30 days, higher than 2.1% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.13%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 43 · Related 43
OPENSUSE-SU-2026:21910-1SUSE-SU-2026:23477-1SUSE-SU-2026:23481-1SUSE-SU-2026:23528-1SUSE-SU-2026:23529-1SUSE-SU-2026:23881-1

Timeline

  1. 19-07-2026
    PublishedVulnerability first disclosed.

Description

In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors adm1266_gpio_get() and adm1266_gpio_get_multiple() both compose the pin-status word as pins_status = read_buf[0] + (read_buf[1] << 8); right after i2c_smbus_read_block_data(), guarding only against an error return. A well-behaved device returns 2 bytes for GPIO_STATUS/PDIO_STATUS, but the helper happily reports a 0- or 1-byte response too. If the device returns 0 bytes, both read_buf slots are uninitialized stack memory; if it returns 1 byte, read_buf[1] is. The composed value then flows through set_bit() into the caller's *bits in adm1266_gpio_get_multiple(), or into the return value of adm1266_gpio_get(), and ends up in userspace via gpiolib (sysfs and the char-dev ioctls). That leaks a few bits of kernel stack per request on any device whose firmware glitch, bus error, or hostile slave produces a short block-read response. Add the missing length check to both call sites and surface a short response as -EIO.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.13%

Chance of exploitation in the next 30 days

Percentile

2%

Versus all other CVEs

30-day change

0.00 pp

From 0.13% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.13%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu155 products
  • linux< 5.15.0-186.196 | < 6.8.0-139.139 | < 7.0.0-28.28
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.15.0-1112.119 | < 6.8.0-1064.67 | < 7.0.0-1009.9
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ d98dfad35c38c037b37c4adc99df01da571031a5, < fd9196aad9e5a3845cea17de3405ebc700382142 | ≥ d98dfad35c38c037b37c4adc99df01da571031a5, < ee4799becf7d2af3778007e22c2e55c4009a49c7 | ≥ d98dfad35c38c037b37c4adc99df01da571031a5, < c603b6c6840ac0c6285f5eefea0de6242710af21 | ≥ d98dfad35c38c037b37c4adc99df01da571031a5, < a2d1c819348b36fccbbfcf37c5fa7a50a9b4528f | ≥ d98dfad35c38c037b37c4adc99df01da571031a5, < ae25cf2ea9ebd06d7ad416647dbdc7b5d0172946 | ≥ d98dfad35c38c037b37c4adc99df01da571031a5, < eb3cd9bb590460c6127145cb245be925d23f5232 | ≥ d98dfad35c38c037b37c4adc99df01da571031a5, < 64fa9328948ddcc0f7f3c23ea1756c126d9dffac | ≥ d98dfad35c38c037b37c4adc99df01da571031a5, < a7232f68c43ca62f545049b7f5fbfc75137b843b | 5.10
  • linux_kernel≥ 5.10, < 5.10.258 | ≥ 5.11, < 5.15.209 | ≥ 5.16, < 6.1.175 | ≥ 6.2, < 6.6.142 | ≥ 6.7, < 6.12.92 | ≥ 6.13, < 6.18.34 | ≥ 6.19, < 7.0.11 | 7.1:rc1 | 7.1:rc2 | 7.1:rc3 | 7.1:rc4
Debian1 product
  • linux< 6.1.176-1 | < 6.12.94-1 | < 7.0.12-1

3 vendors · 158 products

References

44 links
Show all 44 references