CVE-2026-43005
highpriority · track · 28EPSS 0.002 · 5 %ileDEEURUUSEPSS · scored 2026-10-23
In the Linux kernel, the following vulnerability has been resolved: hwmon: (tps53679) Fix array access with zero-length block read i2c_smbus_read_block_data() can return 0, indicating a zero-length read. When this happens, tps53679_identify_chip() accesses buf[ret - 1] which is buf[-1], reading one byte before the buffer on the stack. Fix by changing the check from "ret < 0" to "ret <= 0", treating a zero-length read as an error (-EIO), which prevents the out-of-bounds array access. Also fix a typo in the adjacent comment: "if present" instead of duplicate "if".
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–high · 3.5–7.1
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (36)
Products and version ranges known to be affected.
- Red Hat OpenShift Container Platformall versionscert_bundDEcpe:/a:redhat:openshift:container_platform
advisories (1)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2026-1346Linux Kernel: Mehrere SchwachstellenDeutsch2026-05-03csaf · cert_bundDE
Ein entfernter Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um Root-Rechte zu erlangen, um Sicherheitsmechanismen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen oder Auswirkungen unbestimmter Art zu erzielen.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (8)
External citations — patches, advisories, analysis.
- https://nvd.nist.gov/vuln/detail/CVE-2026-43005cnnvd
- https://www.kernel.org/category/releases.htmlPatchcnnvd
- https://git.kernel.org/stable/c/0e211f6aaa6a00fd0ee0c1eea5498f168c6725e6enisa_euvd
- https://git.kernel.org/stable/c/6999b4769e2a61c463158927102e8c07e3f69ba2enisa_euvd
- https://git.kernel.org/stable/c/79b7e588399bb55f4c10bea6ca41b6c3b944d2bbenisa_euvd
- https://git.kernel.org/stable/c/0e211f6aaa6a00fd0ee0c1eea5498f168c6725e6Patchnvd
- https://git.kernel.org/stable/c/6999b4769e2a61c463158927102e8c07e3f69ba2Patchnvd
- https://git.kernel.org/stable/c/79b7e588399bb55f4c10bea6ca41b6c3b944d2bbPatchnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan