CVE-2026-31627

{"id": "CVE-2026-31627", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "85747311ecb6167c989093c64a13807366fdd3a9", "lessThan": "fd1650da24ed54c716aa9b69e9bbd8a662e492da", "versionType": "git"}, {"status": "affected", "version": "85747311ecb6167c989093c64a13807366fdd3a9", "lessThan": "8f756a5964396da0fc9e0db33253a5b85dbbcbb6", "versionType": "git"}, {"status": "affected", "version": "85747311ecb6167c989093c64a13807366fdd3a9", "lessThan": "2d262da4bca6fab96e2e709feb95b31b0a9a03a7", "versionType": "git"}, {"status": "affected", "version": "85747311ecb6167c989093c64a13807366fdd3a9", "lessThan": "fa00738ab30b07db1a43b9c85fc56b8cc3b7d197", "versionType": "git"}, {"status": "affected", "version": "85747311ecb6167c989093c64a13807366fdd3a9", "lessThan": "d87d5620125a03b1eadbd5df39748215d3db7ddb", "versionType": "git"}, {"status": "affected", "version": "85747311ecb6167c989093c64a13807366fdd3a9", "lessThan": "377fae22a137b6b89f3f32399a58c52cf2325416", "versionType": "git"}, {"status": "affected", "version": "85747311ecb6167c989093c64a13807366fdd3a9", "lessThan": "71b3c316b22c555d2769126a92b1244b15a9750d", "versionType": "git"}, {"status": "affected", "version": "85747311ecb6167c989093c64a13807366fdd3a9", "lessThan": "aaaaec39ddbcd06770dca7f1adebc3b1242ebe7b", "versionType": "git"}, {"status": "affected", "version": "85747311ecb6167c989093c64a13807366fdd3a9", "lessThan": "c0128c7157d639a931353ea344fb44aad6d6e17a", "versionType": "git"}], "programFiles": ["drivers/i2c/busses/i2c-s3c2410.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "3.10"}, {"status": "unaffected", "version": "0", "lessThan": "3.10", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.258", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.209", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.175", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.136", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.83", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.24", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19.14", "versionType": "semver", "lessThanOrEqual": "6.19.*"}, {"status": "unaffected", "version": "7.0.1", "versionType": "semver", "lessThanOrEqual": "7.0.*"}, {"status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/i2c/busses/i2c-s3c2410.c"], "defaultStatus": "affected"}]}], "published": "2026-04-24T15:16:42.003", "references": [{"url": "https://git.kernel.org/stable/c/2d262da4bca6fab96e2e709feb95b31b0a9a03a7", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/377fae22a137b6b89f3f32399a58c52cf2325416", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/71b3c316b22c555d2769126a92b1244b15a9750d", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/8f756a5964396da0fc9e0db33253a5b85dbbcbb6", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/aaaaec39ddbcd06770dca7f1adebc3b1242ebe7b", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c0128c7157d639a931353ea344fb44aad6d6e17a", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d87d5620125a03b1eadbd5df39748215d3db7ddb", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/fa00738ab30b07db1a43b9c85fc56b8cc3b7d197", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/fd1650da24ed54c716aa9b69e9bbd8a662e492da", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: s3c24xx: check the size of the SMBUS message before using it\n\nThe first byte of an i2c SMBUS message is the size, and it should be\nverified to ensure that it is in the range of 0..I2C_SMBUS_BLOCK_MAX\nbefore processing it.\n\nThis is the same logic that was added in commit a6e04f05ce0b (\"i2c:\ntegra: check msg length in SMBUS block read\") to the i2c tegra driver."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ni2c: s3c24xx: verificar el tama\u00f1o del mensaje SMBUS antes de usarlo\n\nEl primer byte de un mensaje SMBUS i2c es el tama\u00f1o, y debe ser verificado para asegurar que est\u00e1 en el rango de 0..I2C_SMBUS_BLOCK_MAX antes de procesarlo.\n\nEsta es la misma l\u00f3gica que fue a\u00f1adida en el commit a6e04f05ce0b (\u2019i2c: tegra: check msg length in SMBUS block read\u2019) al controlador i2c tegra."}], "lastModified": "2026-11-11T23:10:00.263", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB898C76-28CD-416F-9777-F00444862F17", "versionEndExcluding": "6.6.136", "versionStartIncluding": "3.10.1"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F0AE5B5-23AC-4DCC-B37A-51CA1DAE7BA8", "versionEndExcluding": "6.12.83", "versionStartIncluding": "6.7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8126B8B8-6D0B-4443-86C1-672AEE893555", "versionEndExcluding": "6.18.24", "versionStartIncluding": "6.13"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D6A8A074-BBF4-4803-ABED-519A839435BB", "versionEndExcluding": "6.19.14", "versionStartIncluding": "6.19"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B5888AB-7403-4335-89E4-21CC0B48366A", "versionEndExcluding": "7.0.1", "versionStartIncluding": "7.0"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:3.10:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "82D28405-E1F2-43CF-AA38-B228805AFFF9"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}