CVE-2026-43476

iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()

State: Published
Severity: 7.8 High
Published: May 13, 2026
Updated: Aug 5, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()

sizeof(num) evaluates to sizeof(size_t) (8 bytes on 64-bit) instead of the intended __be32 element size (4 bytes). Use sizeof(*meas) to correctly match the buffer element type.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8f3f130852785dac0759843835ca97c3bacc2b10 to before 9aff2e9c2927ecd9652872a43a0725f101128104Affected 8f3f130852785dac0759843835ca97c3bacc2b10 to before 08881d82f94deaa51800360029908863e5c4c39dAffected 8f3f130852785dac0759843835ca97c3bacc2b10 to before dcdf1e92674efb6692f4ebe189e0aa9fde23a541Affected 8f3f130852785dac0759843835ca97c3bacc2b10 to before 2a4d111a6a34afb8bb4f118009e7728ed2ec7e10Affected 8f3f130852785dac0759843835ca97c3bacc2b10 to before 90e978ace598567e6e30de79805bddf37cf892acAffected 8f3f130852785dac0759843835ca97c3bacc2b10 to before 165f12b40901c6a7aca15796da239726ddcdc5adAffected 8f3f130852785dac0759843835ca97c3bacc2b10 to before 216345f98cae7fcc84f49728c67478ac00321c87Affected
LinuxLinux	5.14Affected before 5.14Not affected 5.15.203 through 5.15.Not affected 6.1.167 through 6.1.Not affected 6.6.130 through 6.6.Not affected 6.12.78 through 6.12.Not affected 6.18.19 through 6.18.Not affected 6.19.9 through 6.19.Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

8f3f130852785dac0759843835ca97c3bacc2b10 to before 9aff2e9c2927ecd9652872a43a0725f101128104Affected
8f3f130852785dac0759843835ca97c3bacc2b10 to before 08881d82f94deaa51800360029908863e5c4c39dAffected
8f3f130852785dac0759843835ca97c3bacc2b10 to before dcdf1e92674efb6692f4ebe189e0aa9fde23a541Affected
8f3f130852785dac0759843835ca97c3bacc2b10 to before 2a4d111a6a34afb8bb4f118009e7728ed2ec7e10Affected
8f3f130852785dac0759843835ca97c3bacc2b10 to before 90e978ace598567e6e30de79805bddf37cf892acAffected
8f3f130852785dac0759843835ca97c3bacc2b10 to before 165f12b40901c6a7aca15796da239726ddcdc5adAffected
8f3f130852785dac0759843835ca97c3bacc2b10 to before 216345f98cae7fcc84f49728c67478ac00321c87Affected

LinuxLinux

5.14Affected
before 5.14Not affected
5.15.203 through 5.15.*Not affected
6.1.167 through 6.1.*Not affected
6.6.130 through 6.6.*Not affected
6.12.78 through 6.12.*Not affected
6.18.19 through 6.18.*Not affected
6.19.9 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.