The Linux kernel's mhz19b_receive_buf() function in the iio chemical driver appended serial data chunks into a fixed-size buffer without verifying that the chunk size fit the remaining buffer space. This lack of bounds checking could lead to a buffer overflow before the command path validated the reply. The fix involves resetting the reply state before each command and rejecting oversized serial replies early, returning an -EMSGSIZE error to prevent buffer corruption.

Affected systems running the vulnerable Linux kernel could experience a buffer overflow in the mhz19b driver when processing oversized serial replies. This could lead to memory corruption within the kernel, potentially causing system instability or crashes. No known exploits in the wild have been reported.

A fix has been implemented in the Linux kernel to address this vulnerability by rejecting oversized serial replies and preventing buffer overflow. Users should update their Linux kernel to a version that includes this fix. Patch status is not explicitly confirmed in the provided data; therefore, check the official Linux kernel advisories or vendor updates for the exact fixed versions and apply the update accordingly.