Strix
63.6K

CVE-2026-80605

Unknown

Last modified

CVE-2026-80605 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() In picolcd_send_and_wait(), an integer overflow of the signed loop counter 'k' can theoretically lead to a NULL pointer dereference of 'raw_data'. If the loop executes more than INT_MAX times, 'k' becomes negative, making the condition 'k < size' true even when 'size' is 0. Change the type of 'k' to 'unsigned int' to prevent the overflow and eliminate the out-of-bounds access. Found by Linux Verification Center (linuxtesting.org) with the Svace static analysis tool. [jkosina@suse.com: extended hash length].

Description

In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() In picolcd_send_and_wait(), an integer overflow of the signed loop counter 'k' can theoretically lead to a NULL pointer dereference of 'raw_data'. If the loop executes more than INT_MAX times, 'k' becomes negative, making the condition 'k < size' true even when 'size' is 0. Change the type of 'k' to 'unsigned int' to prevent the overflow and eliminate the out-of-bounds access. Found by Linux Verification Center (linuxtesting.org) with the Svace static analysis tool. [jkosina@suse.com: extended hash length]

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205, < 42dc0b7b55fe0499fc09183f34a1c46d1dcccf77; >= fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205, < 48caee2c106b03301c72fe389ebff00d852c58d5; >= fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205, < dc176447c7279435c46735db7da81aed1ec25cc2; >= fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205, < a02d5d7ad7ae5fa3756b8332f7350e973085dcb3; >= fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205, < e4edeefb8d5bfceb2058e2b3291f4ae1e5a76e61; >= fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205, < d354e523c6f740db758cafcd4c11bb7913285ed8; >= fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205, < ef649703dce0df1364fcec3cdad9b32d1c522939; >= fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205, < 0021eb09041f021c079be1022934a280f7f176c0
LinuxLinux3.7

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-80605?
In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() In picolcd_send_and_wait(), an integer overflow of the signed loop counter 'k' can theoretically lead to a NULL pointer dereference of 'raw_data'. If the loop executes more than INT_MAX times, 'k' becomes negative, making the condition 'k < size' true even when 'size' is 0. Change the type of 'k' to 'unsigned int' to prevent the overflow and eliminate the out-of-bounds access. Found by Linux Verification Center (linuxtesting.org) with the Svace static analysis tool. [jkosina@suse.com: extended hash length]
How severe is CVE-2026-80605?
Severity scoring for CVE-2026-80605 is pending analysis.
How do I fix CVE-2026-80605?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-80605?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST