CVE-2026-89619

Received Received - Intake

Buffer Overflow in Linux Kernel HID Subsystem

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer quickspi_hid_raw_request() receives the caller's buffer length in len, but quickspi_get_report() never sees it and copies the whole device-supplied response into buf regardless: memcpy(buf, qsdev->report_buf, qsdev->report_len); qsdev->report_len comes from the input report the touch controller returns, while buf is sized to whatever the caller asked hidraw for through HIDIOCGFEATURE or HIDIOCGINPUT. A response larger than that overflows buf with device-controlled content. The intel-quicki2c sibling already passes the caller length down to quicki2c_get_report() and validates the response against it before the copy. Do the same here.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-11

Generated

2026-09-12

AI Q&A

2026-09-12

EPSS Evaluated

N/A

NVD

CVE-2026-89619

EUVD

EUVD-2026-76531

Affected Vendors & Products

Vendor	Product	Version / Range
intel	intel-quickspi	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a buffer overflow issue in the Linux kernel's HID subsystem for Intel QuickSPI devices. The function quickspi_hid_raw_request() receives a buffer length from the caller but does not pass it to quickspi_get_report(), which then copies the entire device response into the buffer without checking its size. This can lead to a buffer overflow if the device returns a response larger than the caller's buffer.

Detection Guidance

This vulnerability is specific to the Linux kernel's HID subsystem for Intel QuickSPI devices. Detection requires checking the kernel version and verifying if the vulnerable code path exists. Use commands like 'uname -a' to check the kernel version and 'dmesg | grep intel-thc-hid' to look for related driver messages.

Impact Analysis

This vulnerability could allow an attacker with access to the system to cause a buffer overflow, potentially leading to memory corruption, crashes, or arbitrary code execution. It may also enable privilege escalation if exploited successfully.

Mitigation Strategies

Apply the latest kernel update from your Linux distribution to patch the vulnerability. If an update is not immediately available, consider disabling the intel-quickspi module temporarily using 'modprobe -r intel-quickspi' until a patch is applied.

Hi! I’m here to help you understand CVE-2026-89619. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70