← Back to the live CVE advisory feed

CVE-2026-80604: Linux

Severity

8.8 (HIGH)

Vendor

LINUX

Affected versions

59bfdb41a34cf5d6af1c637348714c2b5a6ca676 through before f8896b684e246f3f00f45ba2b6803ae59b9cc768; a4d6cb7cf45bddc76c78ed

Patch status

Patched

Published

2026-08-28T08:16:44.317

Modified

2026-08-29T07:16:45.480

Why it matters

High-severity vulnerability requiring prioritized review.

Recommended admin actions

• Review and patch based on exposure, asset criticality, and business impact.
• Compare installed versions against the affected version range in the advisory.

Technical summary

In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hid_get_report for numbered reports When a caller passes a size of 0 to hid_report_raw_event() for a numbered report, the function originally called hid_get_report() before performing any size validation. Inside hid_get_report(), if the report is numbered (report_enum->numbered is true), it unconditionally dereferences data[0] to extract the report ID. With a size of 0, this results in an out-of-bounds read or kernel panic. Fix this by moving the numbered report size validation check before the call to hid_get_report(), ensuring that size is at least 1 before dereferencing the data pointer.

View the official NVD record for CVE-2026-80604

CVE data is sourced from NVD/CNA records and optional enrichment. Validate against the vendor advisory before taking production action.