Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-45865

In the Linux kernel, the following vulnerability has been resolved: mctp i2c: initialise event handler read bytes Set a 0xff value for i2c reads of an mctp-i2c device. Otherwise reads will return "val" from the i2c bus driver. For i2c-aspeed and i2c-npcm7xx that is a stack uninitialised u8. Tested with "i2ctransfer -y 1 r10@0x34" where 0x34 is a mctp-i2c instance, now it returns all 0xff.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:126dea37f90e41931614d182328e3ab5d832df0cd1562bba507e46f86595b199
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/mctp/mctp-i2c.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.18"},{"lessThan":"5.18","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.128","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.75","versionType":"semver"},{"less…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:57d600c2c437a66d0bea7a913c97a011e88c45a669aa7b9bae605831b390272e · sha256:7eb4fe1e26583f2a… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/mctp/mctp-i2c.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"93e01e837e105299f1c259ef71f6e1ec4fe806e3","status":"affected","version":"f5b8abf9fc3dacd7529d363e26fe8230935d65f8","versionType":"git"},{"lessThan":"11f83253244060b5de5eac787f61ae3f3e559d01","status":"affected","version":"f5b8abf9fc3dacd7529d363e26fe8230935d65f8","versionType":"git"},{"lessThan":"fa9861e5c8af7651dddfa8d490aaada17ae33b6c","status":"affected","version":"f5b8abf9fc3dacd752…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:57d600c2c437a66d0bea7a913c97a011e88c45a669aa7b9bae605831b390272e · sha256:7eb4fe1e26583f2a… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/mctp/mctp-i2c.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.18"},{"lessThan":"5.18","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.128","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.75","versionType":"semver"},{"less…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:57d600c2c437a66d0bea7a913c97a011e88c45a669aa7b9bae605831b390272e · sha256:7eb4fe1e26583f2a… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/mctp/mctp-i2c.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"93e01e837e105299f1c259ef71f6e1ec4fe806e3","status":"affected","version":"f5b8abf9fc3dacd7529d363e26fe8230935d65f8","versionType":"git"},{"lessThan":"11f83253244060b5de5eac787f61ae3f3e559d01","status":"affected","version":"f5b8abf9fc3dacd7529d363e26fe8230935d65f8","versionType":"git"},{"lessThan":"fa9861e5c8af7651dddfa8d490aaada17ae33b6c","status":"affected","version":"f5b8abf9fc3dacd752…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:57d600c2c437a66d0bea7a913c97a011e88c45a669aa7b9bae605831b390272e · sha256:7eb4fe1e26583f2a… · /containers/cna/affected/0

Source references

6 source assertions
{"url":"https://git.kernel.org/stable/c/11f83253244060b5de5eac787f61ae3f3e559d01"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:57d600c2c437a66d0bea7a913c97a011e88c45a669aa7b9bae605831b390272e · sha256:7eb4fe1e26583f2a… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/1eeedb310229bfee9dd4d992e5bba33fe1378a8f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:57d600c2c437a66d0bea7a913c97a011e88c45a669aa7b9bae605831b390272e · sha256:7eb4fe1e26583f2a… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/2a14e91b6d76639dac70ea170f4384c1ee3cb48d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:57d600c2c437a66d0bea7a913c97a011e88c45a669aa7b9bae605831b390272e · sha256:7eb4fe1e26583f2a… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/6ff2ebfef75fbc57d937d8fbe738b967edf2d331"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:57d600c2c437a66d0bea7a913c97a011e88c45a669aa7b9bae605831b390272e · sha256:7eb4fe1e26583f2a… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/93e01e837e105299f1c259ef71f6e1ec4fe806e3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:57d600c2c437a66d0bea7a913c97a011e88c45a669aa7b9bae605831b390272e · sha256:7eb4fe1e26583f2a… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/fa9861e5c8af7651dddfa8d490aaada17ae33b6c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:57d600c2c437a66d0bea7a913c97a011e88c45a669aa7b9bae605831b390272e · sha256:7eb4fe1e26583f2a… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer