CVE-2026-43380 (GCVE-0-2026-43380)

Vulnerability from cvelistv5 – Published: 2026-05-08 14:21 – Updated: 2026-08-05 12:27
VLAI
Title
hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read
Summary
In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read The q54sj108a2_debugfs_read function suffers from a stack buffer overflow due to incorrect arguments passed to bin2hex(). The function currently passes 'data' as the destination and 'data_char' as the source. Because bin2hex() converts each input byte into two hex characters, a 32-byte block read results in 64 bytes of output. Since 'data' is only 34 bytes (I2C_SMBUS_BLOCK_MAX + 2), this writes 30 bytes past the end of the buffer onto the stack. Additionally, the arguments were swapped: it was reading from the zero-initialized 'data_char' and writing to 'data', resulting in all-zero output regardless of the actual I2C read. Fix this by: 1. Expanding 'data_char' to 66 bytes to safely hold the hex output. 2. Correcting the bin2hex() argument order and using the actual read count. 3. Using a pointer to select the correct output buffer for the final simple_read_from_buffer call.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: d014538aa38561cd24c5eb228223585f26c5ec71 , < a0fc1b9c738fba231f190ab960c83202722efee5 (git)
Affected: d014538aa38561cd24c5eb228223585f26c5ec71 , < c59090c50f62a17129fc4c5407bc4071305a9e82 (git)
Affected: d014538aa38561cd24c5eb228223585f26c5ec71 , < 52db5ef163c96f916d424e472fb17aadc35a9f7a (git)
Affected: d014538aa38561cd24c5eb228223585f26c5ec71 , < b48a0f8d4541a4f6651dc9a64430ce9fdf5c120b (git)
Affected: d014538aa38561cd24c5eb228223585f26c5ec71 , < 73a7a345816946d276ad2c46c8bb771de67cfc46 (git)
Affected: d014538aa38561cd24c5eb228223585f26c5ec71 , < 24a7b9daa103fa963b3fd37d8805b23e01621976 (git)
Affected: d014538aa38561cd24c5eb228223585f26c5ec71 , < 25dd70a03b1f5f3aa71e1a5091ecd9cd2a13ee43 (git)
Create a notification for this product.
Linux Linux Affected: 5.11
Unaffected: 0 , < 5.11 (semver)
Unaffected: 5.15.203 , ≤ 5.15.* (semver)
Unaffected: 6.1.167 , ≤ 6.1.* (semver)
Unaffected: 6.6.130 , ≤ 6.6.* (semver)
Unaffected: 6.12.78 , ≤ 6.12.* (semver)
Unaffected: 6.18.19 , ≤ 6.18.* (semver)
Unaffected: 6.19.9 , ≤ 6.19.* (semver)
Unaffected: 7.0 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/hwmon/pmbus/q54sj108a2.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "a0fc1b9c738fba231f190ab960c83202722efee5",
              "status": "affected",
              "version": "d014538aa38561cd24c5eb228223585f26c5ec71",
              "versionType": "git"
            },
            {
              "lessThan": "c59090c50f62a17129fc4c5407bc4071305a9e82",
              "status": "affected",
              "version": "d014538aa38561cd24c5eb228223585f26c5ec71",
              "versionType": "git"
            },
            {
              "lessThan": "52db5ef163c96f916d424e472fb17aadc35a9f7a",
              "status": "affected",
              "version": "d014538aa38561cd24c5eb228223585f26c5ec71",
              "versionType": "git"
            },
            {
              "lessThan": "b48a0f8d4541a4f6651dc9a64430ce9fdf5c120b",
              "status": "affected",
              "version": "d014538aa38561cd24c5eb228223585f26c5ec71",
              "versionType": "git"
            },
            {
              "lessThan": "73a7a345816946d276ad2c46c8bb771de67cfc46",
              "status": "affected",
              "version": "d014538aa38561cd24c5eb228223585f26c5ec71",
              "versionType": "git"
            },
            {
              "lessThan": "24a7b9daa103fa963b3fd37d8805b23e01621976",
              "status": "affected",
              "version": "d014538aa38561cd24c5eb228223585f26c5ec71",
              "versionType": "git"
            },
            {
              "lessThan": "25dd70a03b1f5f3aa71e1a5091ecd9cd2a13ee43",
              "status": "affected",
              "version": "d014538aa38561cd24c5eb228223585f26c5ec71",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/hwmon/pmbus/q54sj108a2.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.11"
            },
            {
              "lessThan": "5.11",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.203",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.167",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.130",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.78",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.19",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.203",
                  "versionStartIncluding": "5.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.167",
                  "versionStartIncluding": "5.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.130",
                  "versionStartIncluding": "5.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.78",
                  "versionStartIncluding": "5.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.19",
                  "versionStartIncluding": "5.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.9",
                  "versionStartIncluding": "5.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "5.11",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read\n\nThe q54sj108a2_debugfs_read function suffers from a stack buffer overflow\ndue to incorrect arguments passed to bin2hex(). The function currently\npasses \u0027data\u0027 as the destination and \u0027data_char\u0027 as the source.\n\nBecause bin2hex() converts each input byte into two hex characters, a\n32-byte block read results in 64 bytes of output. Since \u0027data\u0027 is only\n34 bytes (I2C_SMBUS_BLOCK_MAX + 2), this writes 30 bytes past the end\nof the buffer onto the stack.\n\nAdditionally, the arguments were swapped: it was reading from the\nzero-initialized \u0027data_char\u0027 and writing to \u0027data\u0027, resulting in\nall-zero output regardless of the actual I2C read.\n\nFix this by:\n1. Expanding \u0027data_char\u0027 to 66 bytes to safely hold the hex output.\n2. Correcting the bin2hex() argument order and using the actual read count.\n3. Using a pointer to select the correct output buffer for the final\n   simple_read_from_buffer call."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable code is reached by a local userspace read of the q54sj108a2 debugfs file, through read(2)/vfs_read/debugfs proxy operations into q54sj108a2_debugfs_read. There is no network or adjacent protocol path.\nAC:L - On an affected system with the driver, device, and debugfs entry present, a single read of blackbox_read reliably triggers the overflow; there is no race or condition the attacker must win. The vulnerable code always calls bin2hex(..., 32) for that path after a successful SMBus block read.\nPR:L - The vulnerable file is created with mode 0444 and the driver performs no capability or authentication check, so a local unprivileged user can trigger it where debugfs is exposed beyond its root-only default mount. If choosing between root-only debugfs deployment and exposed debugfs deployment, the higher-severity reasonable case is unprivileged local access.\nUI:N - No victim action is needed after the attacker has local access to the debugfs file. The attacker directly opens and reads the file.\nS:U - The corruption occurs in kernel code and impacts the same kernel security authority. It is not a guest-to-host, IOMMU, or other cross-scope boundary bypass.\nC:H - This is kernel stack memory corruption, and the buggy read path can also copy beyond the intended stack buffer back to userspace. Under the required overestimating guidance, memory corruption that can support information disclosure warrants high confidentiality impact.\nI:H - The bug is an out-of-bounds write on the kernel stack, overflowing a 34-byte buffer with up to 64 bytes of hex output plus later indexing beyond the buffer. Kernel stack corruption is defensibly treated as potentially enabling control-flow hijack or arbitrary kernel modification.\nA:H - The stack overflow can corrupt adjacent stack state and, with stack protection, can directly trigger a kernel oops/panic. Repeated local reads can therefore cause high availability impact."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:27:40.763Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/a0fc1b9c738fba231f190ab960c83202722efee5"
        },
        {
          "url": "https://git.kernel.org/stable/c/c59090c50f62a17129fc4c5407bc4071305a9e82"
        },
        {
          "url": "https://git.kernel.org/stable/c/52db5ef163c96f916d424e472fb17aadc35a9f7a"
        },
        {
          "url": "https://git.kernel.org/stable/c/b48a0f8d4541a4f6651dc9a64430ce9fdf5c120b"
        },
        {
          "url": "https://git.kernel.org/stable/c/73a7a345816946d276ad2c46c8bb771de67cfc46"
        },
        {
          "url": "https://git.kernel.org/stable/c/24a7b9daa103fa963b3fd37d8805b23e01621976"
        },
        {
          "url": "https://git.kernel.org/stable/c/25dd70a03b1f5f3aa71e1a5091ecd9cd2a13ee43"
        }
      ],
      "title": "hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-43380",
    "datePublished": "2026-05-08T14:21:28.702Z",
    "dateReserved": "2026-05-01T14:12:56.006Z",
    "dateUpdated": "2026-08-05T12:27:40.763Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-43380",
      "date": "2026-08-05",
      "epss": "0.00143",
      "percentile": "0.04062"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-43380\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-05-08T15:16:49.207\",\"lastModified\":\"2026-06-17T10:49:29.370\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nhwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read\\n\\nThe q54sj108a2_debugfs_read function suffers from a stack buffer overflow\\ndue to incorrect arguments passed to bin2hex(). The function currently\\npasses \u0027data\u0027 as the destination and \u0027data_char\u0027 as the source.\\n\\nBecause bin2hex() converts each input byte into two hex characters, a\\n32-byte block read results in 64 bytes of output. Since \u0027data\u0027 is only\\n34 bytes (I2C_SMBUS_BLOCK_MAX + 2), this writes 30 bytes past the end\\nof the buffer onto the stack.\\n\\nAdditionally, the arguments were swapped: it was reading from the\\nzero-initialized \u0027data_char\u0027 and writing to \u0027data\u0027, resulting in\\nall-zero output regardless of the actual I2C read.\\n\\nFix this by:\\n1. Expanding \u0027data_char\u0027 to 66 bytes to safely hold the hex output.\\n2. Correcting the bin2hex() argument order and using the actual read count.\\n3. Using a pointer to select the correct output buffer for the final\\n   simple_read_from_buffer call.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/hwmon/pmbus/q54sj108a2.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"d014538aa38561cd24c5eb228223585f26c5ec71\",\"lessThan\":\"a0fc1b9c738fba231f190ab960c83202722efee5\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d014538aa38561cd24c5eb228223585f26c5ec71\",\"lessThan\":\"c59090c50f62a17129fc4c5407bc4071305a9e82\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d014538aa38561cd24c5eb228223585f26c5ec71\",\"lessThan\":\"52db5ef163c96f916d424e472fb17aadc35a9f7a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d014538aa38561cd24c5eb228223585f26c5ec71\",\"lessThan\":\"b48a0f8d4541a4f6651dc9a64430ce9fdf5c120b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d014538aa38561cd24c5eb228223585f26c5ec71\",\"lessThan\":\"73a7a345816946d276ad2c46c8bb771de67cfc46\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d014538aa38561cd24c5eb228223585f26c5ec71\",\"lessThan\":\"24a7b9daa103fa963b3fd37d8805b23e01621976\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d014538aa38561cd24c5eb228223585f26c5ec71\",\"lessThan\":\"25dd70a03b1f5f3aa71e1a5091ecd9cd2a13ee43\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/hwmon/pmbus/q54sj108a2.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.11\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.11\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.203\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.167\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.130\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.78\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.19\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.19.9\",\"lessThanOrEqual\":\"6.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.2}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.203\",\"matchCriteriaId\":\"20DDB3E9-AABF-4107-ADB0-5362AA067045\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.167\",\"matchCriteriaId\":\"2EDC6BAF-B710-4E26-B6AA-D68922EE7B43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.130\",\"matchCriteriaId\":\"C57BB918-DF28-46B3-94F7-144176841267\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.78\",\"matchCriteriaId\":\"28D591F5-B196-4CC9-905C-DC80F116E7A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.19\",\"matchCriteriaId\":\"D394AC60-6F28-435F-872A-CCDF384B8331\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"6.19.9\",\"matchCriteriaId\":\"E825E7C3-FEAC-4FD3-8A81-78D7387948C9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"F253B622-8837-4245-BCE5-A7BF8FC76A16\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/24a7b9daa103fa963b3fd37d8805b23e01621976\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/25dd70a03b1f5f3aa71e1a5091ecd9cd2a13ee43\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/52db5ef163c96f916d424e472fb17aadc35a9f7a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/73a7a345816946d276ad2c46c8bb771de67cfc46\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a0fc1b9c738fba231f190ab960c83202722efee5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b48a0f8d4541a4f6651dc9a64430ce9fdf5c120b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c59090c50f62a17129fc4c5407bc4071305a9e82\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "None",
      "current_release_date": "2026-06-28T06:33:54+00:00",
      "cve": "CVE-2026-43380",
      "id": "CVE-2026-43380",
      "initial_release_date": "2026-05-08T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43380.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-21T23:59:54Z",
      "cve": "CVE-2026-43380",
      "id": "CVE-2026-43380",
      "initial_release_date": "2026-05-11T14:13:55Z",
      "product_status:known_affected": "118",
      "product_status:known_not_affected": "169",
      "product_status:recommended": "98",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-43380",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-43380.json",
      "version": "5"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.