CVE-2026-80624

CVE-2026-80624

published August 28, 2026

CVSS
—
EPSS
0%
Percentile
10.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mfd: cs42l43: Sanity check firmware size

Currently the code checks if a firmware was received, however it does

not verify that the firmware size is larger than the firmware header. As

the firmware pointer is dereferenced as a pointer to the header

structure this could lead to an out of bounds memory access. Add the

missing check.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00209 · 10.5th percentile
Published
2026-08-28T12:16Z
References (5)
EPSS history
Timeline
  • 28 AUG 06:48Z
    mfd: cs42l43: Sanity check firmware size
    cvelistv5