Няма оценка
CVSS
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Описание
Оригинално описание
In the Linux kernel, the following vulnerability has been resolved: mctp i2c: initialise event handler read bytes Set a 0xff value for i2c reads of an mctp-i2c device. Otherwise reads will return "val" from the i2c bus driver. For i2c-aspeed and i2c-npcm7xx that is a stack uninitialised u8. Tested with "i2ctransfer -y 1 r10@0x34" where 0x34 is a mctp-i2c instance, now it returns all 0xff.
Засегнати продукти
- Linux Linux: f5b8abf9fc3dacd7529d363e26fe8230935d65f8 преди 93e01e837e105299f1c259ef71f6e1ec4fe806e3; f5b8abf9fc3dacd7529d363e26fe8230935d65f8 преди 11f83253244060b5de5eac787f61ae3f3e559d01; f5b8abf9fc3dacd7529d363e26fe8230935d65f8 преди fa9861e5c8af7651dddfa8d490aaada17ae33b6c; f5b8abf9fc3dacd7529d363e26fe8230935d65f8 преди 6ff2ebfef75fbc57d937d8fbe738b967edf2d331; f5b8abf9fc3dacd7529d363e26fe8230935d65f8 преди 1eeedb310229bfee9dd4d992e5bba33fe1378a8f; f5b8abf9fc3dacd7529d363e26fe8230935d65f8 преди 2a14e91b6d76639dac70ea170f4384c1ee3cb48d
- Linux Linux: 5.18; преди 5.18; 6.1.165 до 6.1.*; 6.6.128 до 6.6.*; 6.12.75 до 6.12.*; 6.18.14 до 6.18.*; 6.19.4 до 6.19.*; от 7.0 нататък
История
- 27 май 2026 Публикувано
Други уязвимости в Linux Linux
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-45865
- https://nvd.nist.gov/vuln/detail/CVE-2026-45865
- https://git.kernel.org/stable/c/93e01e837e105299f1c259ef71f6e1ec4fe806e3
- https://git.kernel.org/stable/c/11f83253244060b5de5eac787f61ae3f3e559d01
- https://git.kernel.org/stable/c/fa9861e5c8af7651dddfa8d490aaada17ae33b6c
- https://git.kernel.org/stable/c/6ff2ebfef75fbc57d937d8fbe738b967edf2d331
- https://git.kernel.org/stable/c/1eeedb310229bfee9dd4d992e5bba33fe1378a8f
- https://git.kernel.org/stable/c/2a14e91b6d76639dac70ea170f4384c1ee3cb48d