CVE-2026-80595

Summary

In the Linux kernel, the following vulnerability has been resolved:

Input: ims-pcu - add response length checks

The driver processes response data from device buffers without verifying that the device actually sent enough data. This can lead to out-of-bounds reads or processing stale data.

Add checks for the expected response length before accessing the buffers.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux628329d52474323938a03826941e166bc7c8eff4 < bbafb75cd9da50d86335cbd98b8b3492bb5e42a6affected
LinuxLinux628329d52474323938a03826941e166bc7c8eff4 < 3e0e8d7f8139a9496e389e7372e3f8b57b3e4e3eaffected
LinuxLinux628329d52474323938a03826941e166bc7c8eff4 < 89cf4d18ff87efa5c47ba38de36aea5c03f98b05affected
LinuxLinux628329d52474323938a03826941e166bc7c8eff4 < f7f5afeed31baaca0b027c2d46a25ee86fb4c9daaffected
LinuxLinux628329d52474323938a03826941e166bc7c8eff4 < dc9fdb538ce5b7f32540991f4a25ab63fab7ba07affected
LinuxLinux628329d52474323938a03826941e166bc7c8eff4 < f28c5cabb2df09ad1fcfb7cdb2b3ed2f690d81f0affected
LinuxLinux628329d52474323938a03826941e166bc7c8eff4 < f3c63aecca90be42b66cdc66de7c4a6104104d17affected
LinuxLinux628329d52474323938a03826941e166bc7c8eff4 < 48c9d92fd4ee3a8f5d2cb46c802a0eff8e67c79caffected
LinuxLinux3.10affected
LinuxLinux0 < 3.10unaffected
LinuxLinux5.10.261 <= 5.10.*unaffected
LinuxLinux5.15.212 <= 5.15.*unaffected
LinuxLinux6.1.178 <= 6.1.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.97 <= 6.12.*unaffected
LinuxLinux6.18.40 <= 6.18.*unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References