CVE-2026-80595

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - add response length checks The driver processes response data from device buffers without verifying that the device actually sent enough data. This can lead to out-of-bounds reads or processing stale data. Add checks for the expected response length before accessing the buffers.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/3e0e8d7f8139a9496e389e7372e3f8b57b3e4e3e
https://git.kernel.org/stable/c/48c9d92fd4ee3a8f5d2cb46c802a0eff8e67c79c
https://git.kernel.org/stable/c/89cf4d18ff87efa5c47ba38de36aea5c03f98b05
https://git.kernel.org/stable/c/bbafb75cd9da50d86335cbd98b8b3492bb5e42a6
https://git.kernel.org/stable/c/dc9fdb538ce5b7f32540991f4a25ab63fab7ba07
https://git.kernel.org/stable/c/f28c5cabb2df09ad1fcfb7cdb2b3ed2f690d81f0
https://git.kernel.org/stable/c/f3c63aecca90be42b66cdc66de7c4a6104104d17
https://git.kernel.org/stable/c/f7f5afeed31baaca0b027c2d46a25ee86fb4c9da

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-28 08:16

Updated : 2026-08-28 08:16

NVD link : CVE-2026-80595

Mitre link : CVE-2026-80595

CVE.ORG link : CVE-2026-80595

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-80595", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "628329d52474323938a03826941e166bc7c8eff4", "lessThan": "bbafb75cd9da50d86335cbd98b8b3492bb5e42a6", "versionType": "git"}, {"status": "affected", "version": "628329d52474323938a03826941e166bc7c8eff4", "lessThan": "3e0e8d7f8139a9496e389e7372e3f8b57b3e4e3e", "versionType": "git"}, {"status": "affected", "version": "628329d52474323938a03826941e166bc7c8eff4", "lessThan": "89cf4d18ff87efa5c47ba38de36aea5c03f98b05", "versionType": "git"}, {"status": "affected", "version": "628329d52474323938a03826941e166bc7c8eff4", "lessThan": "f7f5afeed31baaca0b027c2d46a25ee86fb4c9da", "versionType": "git"}, {"status": "affected", "version": "628329d52474323938a03826941e166bc7c8eff4", "lessThan": "dc9fdb538ce5b7f32540991f4a25ab63fab7ba07", "versionType": "git"}, {"status": "affected", "version": "628329d52474323938a03826941e166bc7c8eff4", "lessThan": "f28c5cabb2df09ad1fcfb7cdb2b3ed2f690d81f0", "versionType": "git"}, {"status": "affected", "version": "628329d52474323938a03826941e166bc7c8eff4", "lessThan": "f3c63aecca90be42b66cdc66de7c4a6104104d17", "versionType": "git"}, {"status": "affected", "version": "628329d52474323938a03826941e166bc7c8eff4", "lessThan": "48c9d92fd4ee3a8f5d2cb46c802a0eff8e67c79c", "versionType": "git"}], "programFiles": ["drivers/input/misc/ims-pcu.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "3.10"}, {"status": "unaffected", "version": "0", "lessThan": "3.10", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.261", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.212", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.178", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.145", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.97", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.40", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.5", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/input/misc/ims-pcu.c"], "defaultStatus": "affected"}]}], "published": "2026-08-28T08:16:43.187", "references": [{"url": "https://git.kernel.org/stable/c/3e0e8d7f8139a9496e389e7372e3f8b57b3e4e3e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/48c9d92fd4ee3a8f5d2cb46c802a0eff8e67c79c", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/89cf4d18ff87efa5c47ba38de36aea5c03f98b05", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/bbafb75cd9da50d86335cbd98b8b3492bb5e42a6", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/dc9fdb538ce5b7f32540991f4a25ab63fab7ba07", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/f28c5cabb2df09ad1fcfb7cdb2b3ed2f690d81f0", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/f3c63aecca90be42b66cdc66de7c4a6104104d17", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/f7f5afeed31baaca0b027c2d46a25ee86fb4c9da", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nInput: ims-pcu - add response length checks\n\nThe driver processes response data from device buffers without verifying\nthat the device actually sent enough data. This can lead to\nout-of-bounds reads or processing stale data.\n\nAdd checks for the expected response length before accessing the\nbuffers."}], "lastModified": "2026-08-28T08:16:43.187", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}