CVE-2026-43005

hwmon: (tps53679) Fix array access with zero-length block read

State
Published
Severity
Not scored
Published
May 1, 2026
Updated
May 11, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (tps53679) Fix array access with zero-length block read

i2c_smbus_read_block_data() can return 0, indicating a zero-length read. When this happens, tps53679_identify_chip() accesses buf[ret - 1] which is buf[-1], reading one byte before the buffer on the stack.

Fix by changing the check from "ret < 0" to "ret <= 0", treating a zero-length read as an error (-EIO), which prevents the out-of-bounds array access.

Also fix a typo in the adjacent comment: "if present" instead of duplicate "if".

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 75ca1e5875fe3f0b9d0e8615c69f49bc2c7fb65d to before 79b7e588399bb55f4c10bea6ca41b6c3b944d2bbAffected
  • 75ca1e5875fe3f0b9d0e8615c69f49bc2c7fb65d to before 6999b4769e2a61c463158927102e8c07e3f69ba2Affected
  • 75ca1e5875fe3f0b9d0e8615c69f49bc2c7fb65d to before 0e211f6aaa6a00fd0ee0c1eea5498f168c6725e6Affected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.18.22 through 6.18.*Not affected
  • 6.19.12 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.