Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64135

In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX adm1266_nvmem_read_blackbox() declares a 5-byte stack buffer and passes it to i2c_smbus_read_block_data() to retrieve the 4-byte BLACKBOX_INFO response. i2c_smbus_read_block_data() does not honour caller buffer sizes -- it memcpy()s data.block[0] bytes from the SMBus transaction (where data.block[0] is the length byte returned by the slave device, up to
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:dd282b6587a5fe3b9cae8b4c65f1945c92ede28dd7cb568ed9817ebbda6fa5e6
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/hwmon/pmbus/adm1266.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.10"},{"lessThan":"5.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:03b29d877f7d0357966bd8925550a640fc298a2f1ac54d406bd84ec6fee88db7 · sha256:7ef7b8a3a5469a4d… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/hwmon/pmbus/adm1266.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"33251abb9c9dd62943be76f0427c5527ee39188f","status":"affected","version":"15609d1893020436e1e8ccfd9ded774a96dd17a2","versionType":"git"},{"lessThan":"ba09f4baa5bd96c5d26c942defa546a72dbbe5bf","status":"affected","version":"15609d1893020436e1e8ccfd9ded774a96dd17a2","versionType":"git"},{"lessThan":"6ed16a40b162e9d87d9ac8bed4d7f0e3e807700e","status":"affected","version":"15609d1893020436…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:03b29d877f7d0357966bd8925550a640fc298a2f1ac54d406bd84ec6fee88db7 · sha256:7ef7b8a3a5469a4d… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/hwmon/pmbus/adm1266.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.10"},{"lessThan":"5.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:03b29d877f7d0357966bd8925550a640fc298a2f1ac54d406bd84ec6fee88db7 · sha256:7ef7b8a3a5469a4d… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/hwmon/pmbus/adm1266.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"33251abb9c9dd62943be76f0427c5527ee39188f","status":"affected","version":"15609d1893020436e1e8ccfd9ded774a96dd17a2","versionType":"git"},{"lessThan":"ba09f4baa5bd96c5d26c942defa546a72dbbe5bf","status":"affected","version":"15609d1893020436e1e8ccfd9ded774a96dd17a2","versionType":"git"},{"lessThan":"6ed16a40b162e9d87d9ac8bed4d7f0e3e807700e","status":"affected","version":"15609d1893020436…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:03b29d877f7d0357966bd8925550a640fc298a2f1ac54d406bd84ec6fee88db7 · sha256:7ef7b8a3a5469a4d… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/0dbf64c502443c08c2e28a77ecbfcc5479d93228"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:03b29d877f7d0357966bd8925550a640fc298a2f1ac54d406bd84ec6fee88db7 · sha256:7ef7b8a3a5469a4d… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/2b7a698d5093b548c464828d984f05ced5f3fd2a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:03b29d877f7d0357966bd8925550a640fc298a2f1ac54d406bd84ec6fee88db7 · sha256:7ef7b8a3a5469a4d… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/33251abb9c9dd62943be76f0427c5527ee39188f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:03b29d877f7d0357966bd8925550a640fc298a2f1ac54d406bd84ec6fee88db7 · sha256:7ef7b8a3a5469a4d… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/6ed16a40b162e9d87d9ac8bed4d7f0e3e807700e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:03b29d877f7d0357966bd8925550a640fc298a2f1ac54d406bd84ec6fee88db7 · sha256:7ef7b8a3a5469a4d… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/7f705e581ef3e6bb308a121a89adf5237d968204"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:03b29d877f7d0357966bd8925550a640fc298a2f1ac54d406bd84ec6fee88db7 · sha256:7ef7b8a3a5469a4d… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/ba09f4baa5bd96c5d26c942defa546a72dbbe5bf"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:03b29d877f7d0357966bd8925550a640fc298a2f1ac54d406bd84ec6fee88db7 · sha256:7ef7b8a3a5469a4d… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/ca560f7566df7e2826c2999e959e6b94eb938f76"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:03b29d877f7d0357966bd8925550a640fc298a2f1ac54d406bd84ec6fee88db7 · sha256:7ef7b8a3a5469a4d… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/eee213daa1e1b402eb631bcd1b8c5aa340a6b081"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:03b29d877f7d0357966bd8925550a640fc298a2f1ac54d406bd84ec6fee88db7 · sha256:7ef7b8a3a5469a4d… · /containers/cna/references/7

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer