CVE-2026-80594
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing The driver parses CDC union descriptors in ims_pcu_get_cdc_union_desc() by iterating through the extra descriptor data. However, it does not verify that the bLength of each descriptor is at least 2. A malicious device could provide a descriptor with bLength = 0, leading to an infinite loop in the driver. Add a check to ensure bLength is at least 2 before proceeding with parsing.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedAug 28, 2026
First seenAug 28, 2026
How to fix
Update
- Linux Linux67a038c5a7c9bd8aabe6fba8ac9d2e31c0bd5a28, 6314bd9e2a6b3362998dc85485dd4b0f133a3532, 76eeeb3a8e3c13d5c0ef28666b57dcb5cc101a32, e3f93d63dcd48c1f0ba9041f2ffa8aea7170e295, b847f2725ef47a26b3d01eca3d54fd811e5a544d, 383934c249a9817d242d02d30bfbc8defbf0d533, bbbe31486cf2d12177462e4a814244c2597c9849, d4579af29e67ca8722db0a1194227f8015c8981d or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 628329d52474323938a03826941e166bc7c8eff4 ≤ v < 67a038c5a7c9bd8aabe6fba8ac9d2e31c0bd5a28, 628329d52474323938a03826941e166bc7c8eff4 ≤ v < 6314bd9e2a6b3362998dc85485dd4b0f133a3532, 628329d52474323938a03826941e166bc7c8eff4 ≤ v < 76eeeb3a8e3c13d5c0ef28666b57dcb5cc101a32, 628329d52474323938a03826941e166bc7c8eff4 ≤ v < e3f93d63dcd48c1f0ba9041f2ffa8aea7170e295, 628329d52474323938a03826941e166bc7c8eff4 ≤ v < b847f2725ef47a26b3d01eca3d54fd811e5a544d, 628329d52474323938a03826941e166bc7c8eff4 ≤ v < 383934c249a9817d242d02d30bfbc8defbf0d533, 628329d52474323938a03826941e166bc7c8eff4 ≤ v < bbbe31486cf2d12177462e4a814244c2597c9849, 628329d52474323938a03826941e166bc7c8eff4 ≤ v < d4579af29e67ca8722db0a1194227f8015c8981d, 3.10 | 67a038c5a7c9bd8aabe6fba8ac9d2e31c0bd5a28, 6314bd9e2a6b3362998dc85485dd4b0f133a3532, 76eeeb3a8e3c13d5c0ef28666b57dcb5cc101a32, e3f93d63dcd48c1f0ba9041f2ffa8aea7170e295, b847f2725ef47a26b3d01eca3d54fd811e5a544d, 383934c249a9817d242d02d30bfbc8defbf0d533, bbbe31486cf2d12177462e4a814244c2597c9849, d4579af29e67ca8722db0a1194227f8015c8981d |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.