Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-80594 Details

Description

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing The driver parses CDC union descriptors in ims_pcu_get_cdc_union_desc() by iterating through the extra descriptor data. However, it does not verify that the bLength of each descriptor is at least 2. A malicious device could provide a descriptor with bLength = 0, leading to an infinite loop in the driver. Add a check to ensure bLength is at least 2 before proceeding with parsing.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/383934c249a9817d242d02d30bfbc8defbf0d533	kernel.org
https://git.kernel.org/stable/c/6314bd9e2a6b3362998dc85485dd4b0f133a3532	kernel.org
https://git.kernel.org/stable/c/67a038c5a7c9bd8aabe6fba8ac9d2e31c0bd5a28	kernel.org
https://git.kernel.org/stable/c/76eeeb3a8e3c13d5c0ef28666b57dcb5cc101a32	kernel.org
https://git.kernel.org/stable/c/b847f2725ef47a26b3d01eca3d54fd811e5a544d	kernel.org
https://git.kernel.org/stable/c/bbbe31486cf2d12177462e4a814244c2597c9849	kernel.org
https://git.kernel.org/stable/c/d4579af29e67ca8722db0a1194227f8015c8981d	kernel.org
https://git.kernel.org/stable/c/e3f93d63dcd48c1f0ba9041f2ffa8aea7170e295	kernel.org

see all 8 references

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

No affected product data is available for this CVE.

Change History

1 change record found show changes