Answer in brief
CVE-2026-80594 records a Unknown severity vulnerability in Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=628329d52474323938a03826941e166bc7c8eff4 <67a038c5a7c9bd8aabe6fba8ac9d2e31c0bd5a28 || >=628329d52474323938a03826941e166bc7c8eff4 <6314bd9e2a6b3362998dc85485dd4b0f133a3532 || >=628329d52474323938a03826941e166bc7c8eff4 <76eeeb3a8e3c13d5c0ef28666b57dcb5cc101a32 || >=628329d52474323938a03826941e166bc7c8eff4 <e3f93d63dcd48c1f0ba9041f2ffa8aea7170e295 || >=628329d52474323938a03826941e166bc7c8eff4 <b847f2725ef47a26b3d01eca3d54fd811e5a544d || >=628329d52474323938a03826941e166bc7c8eff4 <383934c249a9817d242d02d30bfbc8defbf0d533 || >=628329d52474323938a03826941e166bc7c8eff4 <bbbe31486cf2d12177462e4a814244c2597c9849 || >=628329d52474323938a03826941e166bc7c8eff4 <d4579af29e67ca8722db0a1194227f8015c8981d | 67a038c5a7c9bd8aabe6fba8ac9d2e31c0bd5a28, 6314bd9e2a6b3362998dc85485dd4b0f133a3532, 76eeeb3a8e3c13d5c0ef28666b57dcb5cc101a32, e3f93d63dcd48c1f0ba9041f2ffa8aea7170e295, b847f2725ef47a26b3d01eca3d54fd811e5a544d, 383934c249a9817d242d02d30bfbc8defbf0d533, bbbe31486cf2d12177462e4a814244c2597c9849, d4579af29e67ca8722db0a1194227f8015c8981d |
| Linux/Linuxgeneric | 3.10 | Not reported |
Published upstream
Aug 28, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 28, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 28, 2026
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing The driver parses CDC union descriptors in ims_pcu_get_cdc_union_desc() by iterating through the extra descriptor data. However, it does not verify that the bLength of each descriptor is at least 2. A malicious device could provide a descriptor with bLength = 0, leading to an infinite loop in the driver. Add a check to ensure bLength is at least 2 before proceeding with parsing.
Quoted source text, attributed separately from HOL analysis.