CVE-2026-80605
Received Received - Intake

NULL Pointer Dereference in Linux Kernel HID picolcd

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() In picolcd_send_and_wait(), an integer overflow of the signed loop counter 'k' can theoretically lead to a NULL pointer dereference of 'raw_data'. If the loop executes more than INT_MAX times, 'k' becomes negative, making the condition 'k < size' true even when 'size' is 0. Change the type of 'k' to 'unsigned int' to prevent the overflow and eliminate the out-of-bounds access. Found by Linux Verification Center (linuxtesting.org) with the Svace static analysis tool. [jkosina@suse.com: extended hash length]

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-28
Last Modified
2026-08-28
Generated
2026-09-17
AI Q&A
2026-08-28
EPSS Evaluated
2026-09-15
NVD
CVE-2026-80605
EUVD
EUVD-2026-67481

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a NULL pointer dereference vulnerability in the Linux kernel's HID picolcd driver. It occurs in the picolcd_send_and_wait() function where an integer overflow in a signed loop counter 'k' could lead to accessing invalid memory. If the loop runs too many times, 'k' becomes negative, causing it to incorrectly evaluate the loop condition and potentially dereference a NULL pointer.

Detection Guidance

This vulnerability is specific to the Linux kernel's HID picolcd driver and involves a NULL pointer dereference due to an integer overflow. Detection requires checking the kernel version and verifying if the vulnerable code is present. Use commands like 'uname -r' to check the kernel version and 'modinfo picolcd' to see if the driver is loaded. If the driver is loaded, inspect the kernel logs for related errors.

Impact Analysis

This vulnerability could cause system crashes or instability if exploited. It may lead to denial-of-service conditions where the affected system becomes unresponsive. However, it requires specific conditions to trigger and is not known to allow arbitrary code execution.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it is a low-level kernel issue involving a NULL pointer dereference in the HID picolcd driver. It could potentially lead to system instability or crashes but does not involve data exposure or privacy violations.

Mitigation Strategies

To mitigate this vulnerability, update the Linux kernel to a version that includes the fix. The patch changes the loop counter type to prevent the overflow. If updating is not immediately possible, consider disabling the picolcd driver by unloading the module with 'modprobe -r picolcd' or blacklisting it in the kernel configuration.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80605. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart