Security Advisory

CVE-2026-80624

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-28 06:48:42
Last updated 2026-08-28 06:48:42
Assigner Linux
CVSS score not scored
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: mfd: cs42l43: Sanity check firmware size Currently the code checks if a firmware was received, however it does not verify that the firmware size is larger than the firmware header. As the firmware pointer is dereferenced as a pointer to the header structure this could lead to an out of bounds memory access. Add the missing check.