SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-80624

UNKNOWN · CVSS N/A EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-20

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of firmware for the cs42l43 multi-function device, specifically due to a lack of verification that the firmware size exceeds the header size. This oversight can result in out-of-bounds memory access, potentially leading to system instability or exploitation. Linux system administrators and developers should prioritize this issue to ensure the integrity and security of their systems.

CVE
CVE-2026-80624
Severity
UNKNOWN
CVSS
N/A
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: mfd: cs42l43: Sanity check firmware size Currently the code checks if a firmware was received, however it does not verify that the firmware size is larger than the firmware header. As the firmware pointer is dereferenced as a pointer to the header structure this could lead to an out of bounds memory access. Add the missing check.