Vulnerability in Linux
CVE-2026-80624
In the Linux kernel, the following vulnerability has been resolved: mfd: cs42l43: Sanity check firmware size Currently the code checks if a firmware was received, however it does not verify that the firmware size is larger than the firmware header. As the firmware pointer is dereferenced as a pointer to the header structure this could lead to an out of bounds memory access. Add the missing check.
EPSS: 0.002 (6.3th percentile) — read the EPSS interpretation.
Affected products
- Linux — versions 6.6