CVE-2026-80595 - Vulnerability Details

- Input: ims-pcu - add response length checks

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: ims-pcu - add response length checks

The driver processes response data from device buffers without verifying
that the device actually sent enough data. This can lead to
out-of-bounds reads or processing stale data.

Add checks for the expected response length before accessing the
buffers.

Published: 2026-08-28

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`628329d52474323938a03826941e166bc7c8eff4`	affected	< bbafb75cd9da50d86335cbd98b8b3492bb5e42a6
`628329d52474323938a03826941e166bc7c8eff4`	affected	< 3e0e8d7f8139a9496e389e7372e3f8b57b3e4e3e
`628329d52474323938a03826941e166bc7c8eff4`	affected	< 89cf4d18ff87efa5c47ba38de36aea5c03f98b05
`628329d52474323938a03826941e166bc7c8eff4`	affected	< f7f5afeed31baaca0b027c2d46a25ee86fb4c9da
`628329d52474323938a03826941e166bc7c8eff4`	affected	< dc9fdb538ce5b7f32540991f4a25ab63fab7ba07
`628329d52474323938a03826941e166bc7c8eff4`	affected	< f28c5cabb2df09ad1fcfb7cdb2b3ed2f690d81f0
`628329d52474323938a03826941e166bc7c8eff4`	affected	< f3c63aecca90be42b66cdc66de7c4a6104104d17
`628329d52474323938a03826941e166bc7c8eff4`	affected	< 48c9d92fd4ee3a8f5d2cb46c802a0eff8e67c79c

Linux

affected

Version	Status	Constraints
`3.10`	affected	—
`0`	unaffected	< 3.10
`5.10.261`	unaffected	≤ 5.10.*
`5.15.212`	unaffected	≤ 5.15.*
`6.1.178`	unaffected	≤ 6.1.*
`6.6.145`	unaffected	≤ 6.6.*
`6.12.97`	unaffected	≤ 6.12.*
`6.18.40`	unaffected	≤ 6.18.*
`7.1.5`	unaffected	≤ 7.1.*
`7.2`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[628329d52474323938a03826941e166bc7c8eff4,bbafb75cd9da50d86335cbd98b8b3492bb5e42a6)`	affected	code_commit	—
`[628329d52474323938a03826941e166bc7c8eff4,3e0e8d7f8139a9496e389e7372e3f8b57b3e4e3e)`	affected	code_commit	—
`[628329d52474323938a03826941e166bc7c8eff4,89cf4d18ff87efa5c47ba38de36aea5c03f98b05)`	affected	code_commit	—
`[628329d52474323938a03826941e166bc7c8eff4,f7f5afeed31baaca0b027c2d46a25ee86fb4c9da)`	affected	code_commit	—
`[628329d52474323938a03826941e166bc7c8eff4,dc9fdb538ce5b7f32540991f4a25ab63fab7ba07)`	affected	code_commit	—
`[628329d52474323938a03826941e166bc7c8eff4,f28c5cabb2df09ad1fcfb7cdb2b3ed2f690d81f0)`	affected	code_commit	—
`[628329d52474323938a03826941e166bc7c8eff4,f3c63aecca90be42b66cdc66de7c4a6104104d17)`	affected	code_commit	—
`[628329d52474323938a03826941e166bc7c8eff4,48c9d92fd4ee3a8f5d2cb46c802a0eff8e67c79c)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`3.10`	affected	generic	—
`[0,3.10)`	unaffected	generic	—
`[5.10.261,5.11.0)`	unaffected	semver	—
`[5.15.212,5.16.0)`	unaffected	semver	—
`[6.1.178,6.2.0)`	unaffected	semver	—
`[6.6.145,6.7.0)`	unaffected	semver	—
`[6.12.97,6.13.0)`	unaffected	semver	—
`[6.18.40,6.19.0)`	unaffected	semver	—
`[7.1.5,7.2.0)`	unaffected	semver	—
`[7.2,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00176.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/3e0e8d7f8139a9496e389e7372e3f8b57b3e4e3e
https://git.kernel.org/stable/c/48c9d92fd4ee3a8f5d2cb46c802a0eff8e67c79c
https://git.kernel.org/stable/c/89cf4d18ff87efa5c47ba38de36aea5c03f98b05
https://git.kernel.org/stable/c/bbafb75cd9da50d86335cbd98b8b3492bb5e42a6
https://git.kernel.org/stable/c/dc9fdb538ce5b7f32540991f4a25ab63fab7ba07
https://git.kernel.org/stable/c/f28c5cabb2df09ad1fcfb7cdb2b3ed2f690d81f0
https://git.kernel.org/stable/c/f3c63aecca90be42b66cdc66de7c4a6104104d17
https://git.kernel.org/stable/c/f7f5afeed31baaca0b027c2d46a25ee86fb4c9da
https://lore.kernel.org/linux-cve-announce/2026082830-CVE-2026-80595-462b@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-80595
https://www.cve.org/CVERecord?id=CVE-2026-80595

History

Mon, 31 Aug 2026 12:15:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2026082830-CVE-2026-80595-462b@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-80595 https://www.cve.org/CVERecord?id=CVE-2026-80595
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Fri, 28 Aug 2026 12:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-125

Fri, 28 Aug 2026 07:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - add response length checks The driver processes response data from device buffers without verifying that the device actually sent enough data. This can lead to out-of-bounds reads or processing stale data. Add checks for the expected response length before accessing the buffers.
Title		Input: ims-pcu - add response length checks
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/3e0e8d7f8139a9496e389e7372e3f8b57b3e4e3e https://git.kernel.org/stable/c/48c9d92fd4ee3a8f5d2cb46c802a0eff8e67c79c https://git.kernel.org/stable/c/89cf4d18ff87efa5c47ba38de36aea5c03f98b05 https://git.kernel.org/stable/c/bbafb75cd9da50d86335cbd98b8b3492bb5e42a6 https://git.kernel.org/stable/c/dc9fdb538ce5b7f32540991f4a25ab63fab7ba07 https://git.kernel.org/stable/c/f28c5cabb2df09ad1fcfb7cdb2b3ed2f690d81f0 https://git.kernel.org/stable/c/f3c63aecca90be42b66cdc66de7c4a6104104d17 https://git.kernel.org/stable/c/f7f5afeed31baaca0b027c2d46a25ee86fb4c9da

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-28T06:48:22.291Z

Updated: 2026-08-28T06:48:22.291Z

Reserved: 2026-08-26T14:34:25.770Z

Link: CVE-2026-80595

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-28T08:16:43.187

Modified: 2026-08-28T08:16:43.187

Link: CVE-2026-80595

Redhat

Severity : Moderate

Publid Date: 2026-08-28T00:00:00Z

Links: CVE-2026-80595 - Bugzilla

OpenCVE Enrichment

Updated: 2026-08-31T14:15:06Z

Weaknesses

CWE-125

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object