CVE-2026-80604

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> HID: core: Fix OOB read in hid_get_report for numbered reports<br /> <br /> When a caller passes a size of 0 to hid_report_raw_event() for a<br /> numbered report, the function originally called hid_get_report() before<br /> performing any size validation.<br /> <br /> Inside hid_get_report(), if the report is numbered (report_enum-&gt;numbered<br /> is true), it unconditionally dereferences data[0] to extract the report ID.<br /> With a size of 0, this results in an out-of-bounds read or kernel panic.<br /> <br /> Fix this by moving the numbered report size validation check before the<br /> call to hid_get_report(), ensuring that size is at least 1 before<br /> dereferencing the data pointer.