High 7.8Published May 13, 2026

CVE-2026-43476iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()

Updated under an hour ago (Oct 27, 2026, 7:23 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() sizeof(num) evaluates to sizeof(size_t) (8 bytes on 64-bit) instead of the intended __be32 element size (4 bytes). Use sizeof(*meas) to correctly match the buffer element type.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 8f3f130852785dac0759843835ca97c3bacc2b10 before 9aff2e9c2927ecd9652872a43a0725f101128104; from 8f3f130852785dac0759843835ca97c3bacc2b10 before 08881d82f94deaa51800360029908863e5c4c39d; from 8f3f130852785dac0759843835ca97c3bacc2b10 before dcdf1e92674efb6692f4ebe189e0aa9fde23a541; 8f3f130852785dac0759843835ca97c3bacc2b10 builds before 2a4d111a6a34afb8bb4f118009e7728ed2ec7e10; from 8f3f130852785dac0759843835ca97c3bacc2b10 before 90e978ace598567e6e30de79805bddf37cf892ac; from 8f3f130852785dac0759843835ca97c3bacc2b10 before 165f12b40901c6a7aca15796da239726ddcdc5ad; from 8f3f130852785dac0759843835ca97c3bacc2b10 before 216345f98cae7fcc84f49728c67478ac00321c87	CNA record
linux linux_kernel linux:linux_kernel	from 5.14 before 5.15.203; from 5.16 before 6.1.167; from 6.2 before 6.6.130; from 6.7 before 6.12.78; from 6.13 before 6.18.19; from 6.19 before 6.19.9; 7.0; 7.0; and 1 more ranges	NVD

References

References

https://git.kernel.org/stable/c/9aff2e9c2927ecd9652872a43a0725f101128104	patch
https://git.kernel.org/stable/c/08881d82f94deaa51800360029908863e5c4c39d	patch
https://git.kernel.org/stable/c/dcdf1e92674efb6692f4ebe189e0aa9fde23a541	patch
https://git.kernel.org/stable/c/2a4d111a6a34afb8bb4f118009e7728ed2ec7e10	patch
https://git.kernel.org/stable/c/90e978ace598567e6e30de79805bddf37cf892ac	patch
https://git.kernel.org/stable/c/165f12b40901c6a7aca15796da239726ddcdc5ad	patch
https://git.kernel.org/stable/c/216345f98cae7fcc84f49728c67478ac00321c87	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.