SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-80595

UNKNOWN · CVSS N/A EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-20

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's ims-pcu driver, which processes response data from device buffers without proper validation of the data length. This oversight can result in out-of-bounds reads or the handling of outdated data, potentially compromising system integrity. Organizations using Linux systems with this driver should prioritize patching to mitigate the risk of exploitation.

CVE
CVE-2026-80595
Severity
UNKNOWN
CVSS
N/A
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - add response length checks The driver processes response data from device buffers without verifying that the device actually sent enough data. This can lead to out-of-bounds reads or processing stale data. Add checks for the expected response length before accessing the buffers.