CVE-2026-43005

Source
https://cve.org/CVERecord?id=CVE-2026-43005
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43005.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-43005
Downstream
Published
2026-05-01T14:15:13.513Z
Modified
2026-07-08T08:13:27.244537698Z
Summary
hwmon: (tps53679) Fix array access with zero-length block read
Details

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (tps53679) Fix array access with zero-length block read

i2csmbusreadblockdata() can return 0, indicating a zero-length read. When this happens, tps53679identifychip() accesses buf[ret - 1] which is buf[-1], reading one byte before the buffer on the stack.

Fix by changing the check from "ret < 0" to "ret <= 0", treating a zero-length read as an error (-EIO), which prevents the out-of-bounds array access.

Also fix a typo in the adjacent comment: "if present" instead of duplicate "if".

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43005.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
75ca1e5875fe3f0b9d0e8615c69f49bc2c7fb65d
Fixed
79b7e588399bb55f4c10bea6ca41b6c3b944d2bb
Fixed
6999b4769e2a61c463158927102e8c07e3f69ba2
Fixed
0e211f6aaa6a00fd0ee0c1eea5498f168c6725e6

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43005.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.17.0
Fixed
6.18.22
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.12

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43005.json"