---
id: "CVE-2026-69006"
kind: "vulnerability"
aliases: ["CVE-2026-69006"]
title: "GNSS firmware loader: unchecked length fields corrupt kernel memory"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["gnss", "infrastructure", "linux-kernel"]
not_affected_if: []
published_at: "2026-11-05T03:17:32+00:00"
first_seen_at: "2026-11-05T03:31:44+00:00"
updated_at: "2026-11-05T03:33:36+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69006", "first_seen_at": "2026-11-05T03:31:44+00:00"}]
exploit_sources: []
---

# GNSS firmware loader: unchecked length fields corrupt kernel memory

The GNSS firmware loader does not properly validate length fields in firmware data, so malformed input can corrupt kernel memory. The sources do not state what an attacker can do beyond memory corruption, such as code execution.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-05T03:31:44+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-69006

## From the sources

Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_