{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "85747311ecb6167c989093c64a13807366fdd3a9"
            },
            {
              "fixed": "fd1650da24ed54c716aa9b69e9bbd8a662e492da"
            },
            {
              "fixed": "8f756a5964396da0fc9e0db33253a5b85dbbcbb6"
            },
            {
              "fixed": "2d262da4bca6fab96e2e709feb95b31b0a9a03a7"
            },
            {
              "fixed": "fa00738ab30b07db1a43b9c85fc56b8cc3b7d197"
            },
            {
              "fixed": "d87d5620125a03b1eadbd5df39748215d3db7ddb"
            },
            {
              "fixed": "377fae22a137b6b89f3f32399a58c52cf2325416"
            },
            {
              "fixed": "71b3c316b22c555d2769126a92b1244b15a9750d"
            },
            {
              "fixed": "aaaaec39ddbcd06770dca7f1adebc3b1242ebe7b"
            },
            {
              "fixed": "c0128c7157d639a931353ea344fb44aad6d6e17a"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.10.0"
            },
            {
              "fixed": "5.10.258"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "5.11.0"
            },
            {
              "fixed": "5.15.209"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "5.16.0"
            },
            {
              "fixed": "6.1.175"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.2.0"
            },
            {
              "fixed": "6.6.136"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.7.0"
            },
            {
              "fixed": "6.12.83"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.13.0"
            },
            {
              "fixed": "6.18.24"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.19.0"
            },
            {
              "fixed": "6.19.14"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.20.0"
            },
            {
              "fixed": "7.0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31627.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: s3c24xx: check the size of the SMBUS message before using it\n\nThe first byte of an i2c SMBUS message is the size, and it should be\nverified to ensure that it is in the range of 0..I2C_SMBUS_BLOCK_MAX\nbefore processing it.\n\nThis is the same logic that was added in commit a6e04f05ce0b (\"i2c:\ntegra: check msg length in SMBUS block read\") to the i2c tegra driver.",
  "id": "CVE-2026-31627",
  "modified": "2026-07-15T01:49:18.947739911Z",
  "published": "2026-04-24T14:42:48.342Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/2d262da4bca6fab96e2e709feb95b31b0a9a03a7"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/377fae22a137b6b89f3f32399a58c52cf2325416"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/71b3c316b22c555d2769126a92b1244b15a9750d"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/8f756a5964396da0fc9e0db33253a5b85dbbcbb6"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/aaaaec39ddbcd06770dca7f1adebc3b1242ebe7b"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/c0128c7157d639a931353ea344fb44aad6d6e17a"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/d87d5620125a03b1eadbd5df39748215d3db7ddb"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/fa00738ab30b07db1a43b9c85fc56b8cc3b7d197"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/fd1650da24ed54c716aa9b69e9bbd8a662e492da"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31627.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31627"
    },
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    }
  ],
  "schema_version": "1.8.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "i2c: s3c24xx: check the size of the SMBUS message before using it"
}