In the Linux kernel, the following vulnerability has been resolved:
USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()
build_i2c_fw_hdr() allocates a fixed-size buffer of (16*1024 - 512) + sizeof(struct ti_i2c_firmware_rec) bytes, then copies le16_to_cpu(img_header->Length) bytes into it without validating that Length fits within the available space after the firmware record header.
img_header->Length is a __le16 from the firmware file and can be up to 65535. check_fw_sanity() validates the total firmware size but not img_header->Length specifically.
Fix by rejecting images where img_header->Length exceeds the available destination space.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.259-258.1043Upgrade kernel-toolsUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo | Jul 8, 2026 | Jul 8, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 5, 2026 | Jul 5, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jun 25, 2026 |
| Ubuntu | — | Upgrade linux-image-oem-26.04aUpgrade linux-image-oracle-64kUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-aws-7.0Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-generic-64kUpgrade linux-image-ibm-7.0Upgrade linux-image-nvidia-bosUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-nvidiaUpgrade linux-image-oracle-7.0Upgrade linux-image-gke-7.0Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-7.0.0-1006-gke-64kUpgrade linux-image-ibmUpgrade linux-image-7.0.0-1013-oemUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidia-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-7.0Upgrade linux-image-genericUpgrade linux-image-gke-64k-7.0Upgrade linux-image-nvidia-64kUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-7.0.0-31-realtime-64kUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-7.0.0-1018-nvidia-64kUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-7.0.0-1018-nvidiaUpgrade linux-image-gke-64kUpgrade linux-image-raspiUpgrade linux-image-7.0.0-1012-awsUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-oem-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-oem-26.04Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-generic-64k-7.0Upgrade linux-image-7.0.0-1019-raspi-realtimeUpgrade linux-image-7.0.0-2018-nvidia-bos-64kUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-azureUpgrade linux-image-7.0.0-2018-nvidia-bosUpgrade linux-image-7.0.0-31-realtimeUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-7.0Upgrade linux-image-7.0.0-1019-raspiUpgrade linux-image-7.0.0-31-genericUpgrade linux-image-virtualUpgrade linux-image-realtime-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-gkeUpgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-7.0.0-1006-gkeUpgrade linux-image-gcpUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-generic-7.0Upgrade linux-image-aws-64kUpgrade linux-image-7.0.0-31-generic-64kUpgrade linux-image-virtual-7.0Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-awsUpgrade linux-image-7.0.0-1012-aws-64kUpgrade linux-image-realtimeUpgrade linux-image-raspi-7.0Upgrade linux-image-oem-26.04bUpgrade linux-image-azure-lts-26.04Upgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-7.0.0-1013-ibmUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-26.04 | Sep 14, 2026 | Sep 7, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 6, 2026 | Jun 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub