{"apiVersion":"1.0","identifier":"CVE-2026-72156","description":"In the Linux kernel, the following vulnerability has been resolved: fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header() mpf_ops_parse_header() reads header_size from the bitstream at MPF_HEADER_SIZE_OFFSET (24). When header_size is zero, the expression *(buf + header_size - 1) reads one byte before the buffer start. Since initial_header_size is set to 71 in mpf_ops, the fpga-mgr core guarantees the buffer is large enough to reach MPF_HEADER_SIZE_OFFSET. The only real gap is the zero header_size case, which cannot be resolved by providing a larger buffer, so return -EINVAL.","publishedAt":"2026-08-15T06:21:33","lastModifiedAt":"2026-08-17T06:18:15","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-72156","cvssScore":null,"cvssVector":"Pending","epssProbability":0.00206,"riskScore":0,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-72156","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-72156","en":"https://www.redsauce.net/en/cves/CVE-2026-72156","fr":"https://www.redsauce.net/fr/cves/CVE-2026-72156","pt":"https://www.redsauce.net/pt/cves/CVE-2026-72156","de":"https://www.redsauce.net/de/cves/CVE-2026-72156","sk":"https://www.redsauce.net/sk/cves/CVE-2026-72156","el":"https://www.redsauce.net/el/cves/CVE-2026-72156"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-72156"}}