CVE-2026-43476 iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()
A buffer size calculation error in the SPS30 I2C driver could lead to memory corruption or undefined behavior during measurement reads.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-43476?
CVE-2026-43476 is a high-severity vulnerability in Linux kernel, published on 13 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()
sizeof(num) evaluates to sizeof(size_t) (8 bytes on 64-bit) instead of the intended __be32 element size (4 bytes). Use sizeof(*meas) to correctly match the buffer element type.
Which versions are affected by CVE-2026-43476?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-43476?
Apply the vendor's patch.
Is CVE-2026-43476 being exploited?
There is no known exploitation of CVE-2026-43476 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2026-43476, DEBIAN-CVE-2026-43476, GHSA-qqrc-59pp-4p3j, ROOT-OS-UBUNTU-2204-CVE-2026-43476, ROOT-OS-UBUNTU-2404-CVE-2026-43476, UBUNTU-CVE-2026-43476.