In the Linux kernel, the following vulnerability has been resolved:
spi: fsl-cpm: Check length parity before switching to 16 bit mode
Commit fc96ec826bce ("spi: fsl-cpm: Use 16 bit mode for large transfers with even size") failed to make sure that the size is really even before switching to 16 bit mode. Until recently the problem went unnoticed because kernfs uses a pre-allocated bounce buffer of size PAGE_SIZE for reading EEPROM.
But commit 8ad6249c51d0 ("eeprom: at25: convert to spi-mem API") introduced an additional dynamically allocated bounce buffer whose size is exactly the size of the transfer, leading to a buffer overrun in the fsl-cpm driver when that size is odd.
Add the missing length parity verification and remain in 8 bit mode when the length is not even.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 11, 2026 | Feb 11, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04dUpgrade linux-image-6.8.0-1051-nvidiaUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-6.17Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1059-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.17.0-1011-oracle-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-gkeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-6.17Upgrade linux-image-oem-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-6.17Upgrade linux-image-6.17.0-22-generic-64kUpgrade linux-image-6.17.0-1012-gcp-64kUpgrade linux-image-awsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1051-nvidia-64kUpgrade linux-image-6.8.0-1054-gcp-fipsUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1049-oracle-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-6.17Upgrade linux-image-6.17.0-1011-oracleUpgrade linux-image-6.8.0-1052-aws-fipsUpgrade linux-image-6.17.0-1010-realtimeUpgrade linux-image-gcpUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1054-azure-fipsUpgrade linux-image-virtualUpgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-raspi-6.17Upgrade linux-image-aws-6.17Upgrade linux-image-6.8.0-1051-nvidia-lowlatencyUpgrade linux-image-fips-6.8Upgrade linux-image-6.17.0-1020-oemUpgrade linux-image-6.8.0-1054-gcp-64kUpgrade linux-image-6.8.0-1050-gkeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1022-nvidia-tegraUpgrade linux-image-6.17.0-1012-awsUpgrade linux-image-xilinxUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-ibm-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1049-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-110-genericUpgrade linux-image-azure-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-110-lowlatency-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-110-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1054-azureUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-6.17Upgrade linux-image-6.8.0-1054-gcpUpgrade linux-image-6.8.0-1051-ibmUpgrade linux-image-generic-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-2042-raspi-realtimeUpgrade linux-image-6.8.0-110-lowlatencyUpgrade linux-image-6.17.0-1012-gcpUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-6.17Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-aws-fipsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-6.17Upgrade linux-image-oem-24.04cUpgrade linux-image-oem-22.04cUpgrade linux-image-azureUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-6.17Upgrade linux-image-6.8.0-1022-nvidia-tegra-rtUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1050-gke-64kUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-virtual-6.17Upgrade linux-image-6.17.0-1013-azureUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1037-gkeopUpgrade linux-image-6.8.0-1052-aws-64kUpgrade linux-image-6.8.0-1052-raspiUpgrade linux-image-nvidia-tegraUpgrade linux-image-aws-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-raspi-6.8Upgrade linux-image-6.17.0-22-genericUpgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gkeopUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1051-nvidia-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-gke-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.1-1047-realtimeUpgrade linux-image-6.8.0-110-generic-64kUpgrade linux-image-6.8.0-1052-awsUpgrade linux-image-6.17.0-1014-raspiUpgrade linux-image-6.17.0-1012-aws-64k | Apr 17, 2026 | Jan 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub