{"id":"CVE-2026-69006","kind":"vulnerability","aliases":["CVE-2026-69006"],"related":[],"title":"GNSS firmware loader: unchecked length fields corrupt kernel memory","description":"Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.","summary":"The GNSS firmware loader does not properly validate length fields in firmware data, so malformed input can corrupt kernel memory. The sources do not state what an attacker can do beyond memory corruption, such as code execution.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["gnss","infrastructure","linux-kernel"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-05T03:17:32+00:00","first_seen_at":"2026-11-05T03:31:44+00:00","triaged_at":"2026-11-05T03:33:36+00:00","updated_at":"2026-11-05T03:33:36+00:00","category":"infrastructure","confidence":0.35,"triage":{"at":"2026-11-05T03:33:36Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"GNSS firmware loader: unchecked length fields corrupt kernel memory","impact":"high","summary":"The GNSS firmware loader does not properly validate length fields in firmware data, so malformed input can corrupt kernel memory. The sources do not state what an attacker can do beyond memory corruption, such as code execution.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["gnss","linux-kernel"],"confidence":0.35,"fix_status":"unknown","needs_auth":"unknown","worst_case":"kernel memory corrupted; further impact unknown","analyst_note":"Find the NVD entry and the affected kernel driver, its versions and whether the loader is reachable without privileges (https://nvd.nist.gov/vuln/detail/CVE-2026-69006).","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000609,"input_tokens":4151,"output_tokens":387,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':11A,14A '-69006':12A,15A 'attack':48B 'beyond':51B 'code':56B 'corrupt':7A,38B,53B,73C 'cve':10A,13A 'data':33B 'execut':57B 'field':6A,30B,62C 'firmwar':2A,23B,32B,66C 'gnss':1A,16B,22B,65C 'infrastructur':17B 'input':36B 'insuffici':58C 'kernel':8A,20B,39B,71C 'length':5A,29B,61C 'linux':19B 'linux-kernel':18B 'loader':3A,24B,67C 'malform':35B 'memori':9A,40B,52B,72C 'proper':27B 'result':69C 'sourc':42B 'state':45B 'uncheck':4A 'valid':28B,59C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["gnss","infrastructure","linuxkernel","unknown"],"campaign_type":null,"first_public_at":"2026-11-05T03:17:32+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-69006","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69006","severity":null,"published_at":"2026-11-05T03:17:32+00:00","modified_at":"2026-11-05T03:17:32+00:00","first_seen_at":"2026-11-05T03:31:44+00:00","fetched_at":"2026-11-05T03:31:44+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}