CVE-2026-80624

Impact

In the Linux kernel, the following vulnerability has been resolved: mfd: cs42l43: Sanity check firmware size Currently the code checks if a firmware was received, however it does not verify that the firmware size is larger than the firmware header. As the firmware pointer is dereferenced as a pointer to the header structure this could lead to an out of bounds memory access. Add the missing check.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

References

• NVD record
• CVE.org record
• https://git.kernel.org/stable/c/17d79248b4f370663f9d351409a130fc1ed9416d
• https://git.kernel.org/stable/c/197a4c54d8a94fe2fb7829661b29f0859c10feb5
• https://git.kernel.org/stable/c/2ce02059ceb6311a33026b62e6e4dc4ed22a3aef
• https://git.kernel.org/stable/c/b6ef1a74b3ec254f87a6a3c554fe8f8083ebd37c
• https://git.kernel.org/stable/c/d35e4032f16d7621468c8b56816e7935ebf590a7