Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64084

In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR adm1266_gpio_get_multiple() iterates the PDIO portion of the caller-supplied mask using for_each_set_bit_from(gpio_nr, mask, ADM1266_GPIO_NR + ADM1266_PDIO_STATUS) { ... } where ADM1266_PDIO_STATUS is the PMBus command code (0xE9, i.e. 233), not the number of PDIO pins. The intended upper bound is ADM1266_GPIO_NR + ADM1266_PDIO_NR = 25. gp
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:9fb3598604369a1aea7ea8f8e98a8d31ed3d4afd86739d70b95cff2ea887fae0
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/hwmon/pmbus/adm1266.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d0593e15fdeb56048a72c5c6e720f702759d0ccd","status":"affected","version":"d98dfad35c38c037b37c4adc99df01da571031a5","versionType":"git"},{"lessThan":"17cee2f59029039416e8f6303050038eb59ba149","status":"affected","version":"d98dfad35c38c037b37c4adc99df01da571031a5","versionType":"git"},{"lessThan":"299efd14c2eda7e5fd40025e54addd4151a01081","status":"affected","version":"d98dfad35c38c037…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c5d69ea9a8838ba570a785549152f2d42f7663b377839e2924681bad91e45cb9 · sha256:93cd93ade02cde32… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/hwmon/pmbus/adm1266.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.10"},{"lessThan":"5.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c5d69ea9a8838ba570a785549152f2d42f7663b377839e2924681bad91e45cb9 · sha256:93cd93ade02cde32… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/hwmon/pmbus/adm1266.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d0593e15fdeb56048a72c5c6e720f702759d0ccd","status":"affected","version":"d98dfad35c38c037b37c4adc99df01da571031a5","versionType":"git"},{"lessThan":"17cee2f59029039416e8f6303050038eb59ba149","status":"affected","version":"d98dfad35c38c037b37c4adc99df01da571031a5","versionType":"git"},{"lessThan":"299efd14c2eda7e5fd40025e54addd4151a01081","status":"affected","version":"d98dfad35c38c037…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c5d69ea9a8838ba570a785549152f2d42f7663b377839e2924681bad91e45cb9 · sha256:93cd93ade02cde32… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/hwmon/pmbus/adm1266.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.10"},{"lessThan":"5.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c5d69ea9a8838ba570a785549152f2d42f7663b377839e2924681bad91e45cb9 · sha256:93cd93ade02cde32… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:c5d69ea9a8838ba570a785549152f2d42f7663b377839e2924681bad91e45cb9 · sha256:93cd93ade02cde32… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/17cee2f59029039416e8f6303050038eb59ba149"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c5d69ea9a8838ba570a785549152f2d42f7663b377839e2924681bad91e45cb9 · sha256:93cd93ade02cde32… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/299efd14c2eda7e5fd40025e54addd4151a01081"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c5d69ea9a8838ba570a785549152f2d42f7663b377839e2924681bad91e45cb9 · sha256:93cd93ade02cde32… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/2aef8f08c479f4cbc83e1e6b19d1c94d4dd24f17"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c5d69ea9a8838ba570a785549152f2d42f7663b377839e2924681bad91e45cb9 · sha256:93cd93ade02cde32… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/4d1da9a6be5a8156c532d571c2ed237169f99244"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c5d69ea9a8838ba570a785549152f2d42f7663b377839e2924681bad91e45cb9 · sha256:93cd93ade02cde32… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/b96c7f0bc0713dc6403912f6527d4ff9168d6fe6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c5d69ea9a8838ba570a785549152f2d42f7663b377839e2924681bad91e45cb9 · sha256:93cd93ade02cde32… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/d0593e15fdeb56048a72c5c6e720f702759d0ccd"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c5d69ea9a8838ba570a785549152f2d42f7663b377839e2924681bad91e45cb9 · sha256:93cd93ade02cde32… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/d7834d92251baade796812876e95555e2066fa9f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c5d69ea9a8838ba570a785549152f2d42f7663b377839e2924681bad91e45cb9 · sha256:93cd93ade02cde32… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/fa7ca363069a70b0d1aa51e8892e3095fe2ac1ec"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c5d69ea9a8838ba570a785549152f2d42f7663b377839e2924681bad91e45cb9 · sha256:93cd93ade02cde32… · /containers/cna/references/5

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer