CVE-2026-80931 Linux CVE debrief

Who should care

Linux kernel developers and maintainers, Linux distribution vendors, and users of Linux-based systems that utilize the w1: ds28e17 component should verify and apply patches to prevent potential out-of-bounds reads.

Why it matters

The Linux kernel's w1: ds28e17 component has a vulnerability that allows for out-of-bounds reads due to an oversize length on an I2C block read. Linux kernel developers and maintainers, Linux distribution vendors, and users of Linux-based systems that utilize the w1: ds28e17 component should verify and apply patches to prevent potential out-of-bounds reads.

• Verify Linux kernel patches for w1: ds28e17 component to prevent out-of-bounds reads
• Validate I2C block read lengths to prevent potential buffer overflows
• Monitor system logs for potential out-of-bounds read attempts

Technical summary

The Linux kernel's w1: ds28e17 component has a vulnerability that allows for out-of-bounds reads due to an oversize length on an I2C block read. The issue arises from the w1_f19_i2c_master_transfer function, which takes the length from the device and reads that many bytes into a buffer. The buffer is controlled by the device and can be 0 to 255, but the driver only rejects a zero count. A patch has been applied to reject lengths above I2C_SMBUS_BLOCK_MAX.

Defensive priority

Verify and apply patches for Linux kernel w1: ds28e17 component to prevent potential out-of-bounds reads.

Recommended defensive actions

• Verify Linux kernel version and apply patches for w1: ds28e17 component
• Review system configurations and ensure I2C block read lengths are validated
• Monitor system logs for potential out-of-bounds read attempts
• Track exceptions and retest remediated assets
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and source references indicate a vulnerability in the Linux kernel's w1: ds28e17 component. The issue allows for out-of-bounds reads due to an oversize length on an I2C block read. A patch has been applied to reject lengths above I2C_SMBUS_BLOCK_MAX.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.