CVE-2026-31748

In the Linux kernel, the following vulnerability has been resolved: comedi: me_daq: Fix potential overrun of firmware buffer `me2600_xilinx_download()` loads the firmware that was requested by `request_firmware()`. It is possible for it to overrun the source buffer because it blindly trusts the file format. It reads a data stream length from the first 4 bytes into variable `file_length` and reads the data stream contents of length `file_length` from offset 16 onwards. Although it checks that the supplied firmware is at least 16 bytes long, it does not check that it is long enough to contain the data stream. Add a test to ensure that the supplied firmware is long enough to contain the header and the data stream. On failure, log an error and return `-EINVAL`.

• CWE-787

• https://git.kernel.org/stable/c/1bf8761eb59e94bf7b8c17b2a1ee48f14378b172Patch
• https://git.kernel.org/stable/c/2fc25a4c2e055cd42ea39a1b42c89bfef70e0319Patch
• https://git.kernel.org/stable/c/9f39fa07259eb342908e4aa0271dee038a8ce4f8Patch
• https://git.kernel.org/stable/c/a47ae40339c1048f519df33ff8840731720f57cbPatch
• https://git.kernel.org/stable/c/c16ac4e173a05011437a2d868f70cc415339065aPatch
• https://git.kernel.org/stable/c/c8c607a77aab783f2e38cc2e0f24aa6c8f6d200bPatch
• https://git.kernel.org/stable/c/cc797d4821c754c701d9714b58bea947e31dbbe0Patch
• https://git.kernel.org/stable/c/f3f8ec00cfb8d8e826e30b1138a56355b88e9ba8Patch

Published

May 1, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-31742In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-31743In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-31744In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31745In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-31746In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31747In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-31749In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31750In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31751In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2026-31752In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31753In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31754In the Linux kernel, the following vulnerability has been re…5.5