CVE-2026-80781

A flaw was found in the Linux kernel. An out-of-bounds read vulnerability exists in the Human Interface Device (HID) core's hid_set_field() function. This flaw occurs when an invalid offset is provided, causing hid_dump_input() to read beyond its allocated buffer. A local attacker or a malicious USB device could exploit this to potentially disclose sensitive information or cause a denial of service.

This vulnerability is rated as having a Moderate impact because exploitation requires either local system access or physical attachment of a specially crafted Human Interface Device (HID), limiting the attack surface in standard enterprise server environments. In typical Red Hat Enterprise Linux configurations, the issue is triggered when processing malformed report descriptors from specialized hardware such as PicoLCD devices, where input offset checks occur after internal debug routines dereference usage arrays. While a malicious local actor or connected USB peripheral could trigger a kernel crash and cause a denial of service, the flaw does not facilitate arbitrary code execution or privilege escalation beyond an unprivileged crash state.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.