CVE-2026-80595

A flaw was found in the Linux kernel. The ims-pcu driver processes response data from device buffers without verifying the actual length of the data sent by the device. This oversight can lead to out-of-bounds reads, potentially allowing an attacker to access sensitive information or cause system instability.

A moderate-impact out-of-bounds read flaw was found in the ims-pcu driver (drivers/input/misc/ims-pcu.c) of the Linux kernel. The driver processes response data from device buffers without verifying that the device actually sent enough data, which can lead to out-of-bounds reads or the processing of stale data, potentially resulting in information disclosure or system instability such as a kernel panic. Exploiting this flaw requires local access to a system with a connected ims-pcu device that supplies malformed or truncated responses. The ims-pcu driver is not present in Red Hat's kernel builds, so Red Hat Enterprise Linux and Red Hat In-Vehicle OS are not affected by this issue; all currently tracked Red Hat product streams are marked NOT AFFECTED because the vulnerable code is not present.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.