Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-80594

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
28/08/2026
Última modificación:
28/08/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing<br /> <br /> The driver parses CDC union descriptors in ims_pcu_get_cdc_union_desc()<br /> by iterating through the extra descriptor data. However, it does not<br /> verify that the bLength of each descriptor is at least 2. A malicious<br /> device could provide a descriptor with bLength = 0, leading to an<br /> infinite loop in the driver.<br /> <br /> Add a check to ensure bLength is at least 2 before proceeding with<br /> parsing.

Impacto