In the Linux kernel, the following vulnerability has been resolved:

mfd: cs42l43: Sanity check firmware size

Currently the code checks if a firmware was received, however it does
not verify that the firmware size is larger than the firmware header. As
the firmware pointer is dereferenced as a pointer to the header
structure this could lead to an out of bounds memory access. Add the
missing check.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
ace6d14481386ec6c1b63cc2b24c71433a583dc2 affected < 2ce02059ceb6311a33026b62e6e4dc4ed22a3aef
ace6d14481386ec6c1b63cc2b24c71433a583dc2 affected < 197a4c54d8a94fe2fb7829661b29f0859c10feb5
ace6d14481386ec6c1b63cc2b24c71433a583dc2 affected < d35e4032f16d7621468c8b56816e7935ebf590a7
ace6d14481386ec6c1b63cc2b24c71433a583dc2 affected < 17d79248b4f370663f9d351409a130fc1ed9416d
ace6d14481386ec6c1b63cc2b24c71433a583dc2 affected < b6ef1a74b3ec254f87a6a3c554fe8f8083ebd37c
Linux Linux affected
Version Status Constraints
6.6 affected —
0 unaffected < 6.6
6.6.145 unaffected ≤ 6.6.*
6.12.97 unaffected ≤ 6.12.*
6.18.40 unaffected ≤ 6.18.*
7.1.5 unaffected ≤ 7.1.*
7.2 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/17d79248b4f370663f9d351409a130fc1ed9416d cve-icon cve-icon
https://git.kernel.org/stable/c/197a4c54d8a94fe2fb7829661b29f0859c10feb5 cve-icon cve-icon
https://git.kernel.org/stable/c/2ce02059ceb6311a33026b62e6e4dc4ed22a3aef cve-icon cve-icon
https://git.kernel.org/stable/c/b6ef1a74b3ec254f87a6a3c554fe8f8083ebd37c cve-icon cve-icon
https://git.kernel.org/stable/c/d35e4032f16d7621468c8b56816e7935ebf590a7 cve-icon cve-icon
History

Fri, 28 Aug 2026 10:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-787

Fri, 28 Aug 2026 07:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: mfd: cs42l43: Sanity check firmware size Currently the code checks if a firmware was received, however it does not verify that the firmware size is larger than the firmware header. As the firmware pointer is dereferenced as a pointer to the header structure this could lead to an out of bounds memory access. Add the missing check.
Title mfd: cs42l43: Sanity check firmware size
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-28T06:48:42.983Z

Reserved: 2026-08-26T14:34:25.775Z

Link: CVE-2026-80624

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-28T08:16:46.543

Modified: 2026-08-28T08:16:46.543

Link: CVE-2026-80624

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-28T10:30:17Z

Weaknesses