Skip to main content

Linux Kernel CVE-2026-43307

| EUVDEUVD-2026-28577 HIGH
2026-05-08 Linux GHSA-q3cr-463h-3mvv
Information Disclosure Linux
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SUSE
HIGH
qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

4
Analysis Generated
May 11, 2026 - 08:22 vuln.today
CVSS changed
May 11, 2026 - 08:22 NVD
7.8 (HIGH)
CVE Published
May 08, 2026 - 13:11 nvd
HIGH 7.8
CVE Published
May 08, 2026 - 13:11 nvd
UNKNOWN (no severity yet)

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

iio: accel: adxl380: Avoid reading more entries than present in FIFO

The interrupt handler reads FIFO entries in batches of N samples, where N is the number of scan elements that have been enabled. However, the sensor fills the FIFO one sample at a time, even when more than one channel is enabled. Therefore,the number of entries reported by the FIFO status registers may not be a multiple of N; if this number is not a multiple, the number of entries read from the FIFO may exceed the number of entries actually present.

To fix the above issue, round down the number of FIFO entries read from the status registers so that it is always a multiple of N.

AnalysisAI

Buffer over-read in the Linux kernel's adxl380 IIO accelerometer driver allows local authenticated users to read arbitrary kernel memory. The FIFO interrupt handler incorrectly calculates batch sizes when multiple channels are enabled, reading more entries than exist in the FIFO buffer. CVSS rates this 7.8 (High) with local access requiring low-privileged credentials. EPSS exploitation probability is minimal (0.02%, 5th percentile), indicating low real-world risk. Patches available in stable kernel versions 6.12.75, 6.18.16, 6.19.6, and 7.0.

Technical ContextAI

The adxl380 driver implements IIO (Industrial I/O) subsystem support for ADXL380-series MEMS accelerometers. IIO drivers expose sensor data through buffered read operations using FIFOs (First-In-First-Out queues). The driver reads data in batches where batch size equals the number of enabled scan elements (channels). However, the ADXL380 hardware populates the FIFO sample-by-sample regardless of enabled channel count. When FIFO status registers report entry counts that are not multiples of the scan element count, the driver performs an integer division without rounding down, causing it to issue reads beyond the FIFO's actual population. This results in reading uninitialized or stale kernel memory from the buffer, constituting an information disclosure vulnerability. The fix applies modulo arithmetic to ensure read counts are always multiples of the scan element count.

RemediationAI

Upgrade to patched Linux kernel versions: 6.12.75, 6.18.16, 6.19.6, or 7.0 and later. Upstream patches are available at https://git.kernel.org/stable/c/a40f316085985f916ba1599fc303fdbc6a078e86 (6.12 series), https://git.kernel.org/stable/c/a8e88edfd69df7b63c882aa53e61e7c078806ad7, https://git.kernel.org/stable/c/f42ddb2945ae4ce2b6f1c2e7aae9f14455a734d3, and https://git.kernel.org/stable/c/c1b14015224cfcccd5356333763f2f4f401bd810 (6.18/6.19/7.0 series). For systems where immediate kernel upgrades are not feasible, disable the adxl380 driver by blacklisting the module (echo 'blacklist adxl380' >> /etc/modprobe.d/blacklist.conf) or unloading it (modprobe -r adxl380). This mitigation eliminates functionality for ADXL380 accelerometer hardware. Alternatively, restrict physical and logical access to systems with this hardware to trusted users only, reducing local attack surface. No significant side effects from the patch are expected as it corrects buffer boundary calculations without changing driver functionality.

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Vendor StatusVendor

SUSE

Severity: High
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed

Share

CVE-2026-43307 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy