CVE-2026-80605

HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()

State: Published
Severity: Not scored
Published: Aug 28, 2026
Updated: Aug 28, 2026
Reserved: Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()

In picolcd_send_and_wait(), an integer overflow of the signed loop counter 'k' can theoretically lead to a NULL pointer dereference of 'raw_data'. If the loop executes more than INT_MAX times, 'k' becomes negative, making the condition 'k < size' true even when 'size' is 0.

Change the type of 'k' to 'unsigned int' to prevent the overflow and eliminate the out-of-bounds access.

Found by Linux Verification Center (linuxtesting.org) with the Svace static analysis tool.

[jkosina@suse.com: extended hash length]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205 to before 42dc0b7b55fe0499fc09183f34a1c46d1dcccf77Affected fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205 to before 48caee2c106b03301c72fe389ebff00d852c58d5Affected fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205 to before dc176447c7279435c46735db7da81aed1ec25cc2Affected fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205 to before a02d5d7ad7ae5fa3756b8332f7350e973085dcb3Affected fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205 to before e4edeefb8d5bfceb2058e2b3291f4ae1e5a76e61Affected fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205 to before d354e523c6f740db758cafcd4c11bb7913285ed8Affected fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205 to before ef649703dce0df1364fcec3cdad9b32d1c522939Affected fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205 to before 0021eb09041f021c079be1022934a280f7f176c0Affected
LinuxLinux	3.7Affected before 3.7Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205 to before 42dc0b7b55fe0499fc09183f34a1c46d1dcccf77Affected
fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205 to before 48caee2c106b03301c72fe389ebff00d852c58d5Affected
fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205 to before dc176447c7279435c46735db7da81aed1ec25cc2Affected
fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205 to before a02d5d7ad7ae5fa3756b8332f7350e973085dcb3Affected
fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205 to before e4edeefb8d5bfceb2058e2b3291f4ae1e5a76e61Affected
fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205 to before d354e523c6f740db758cafcd4c11bb7913285ed8Affected
fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205 to before ef649703dce0df1364fcec3cdad9b32d1c522939Affected
fabdbf2fd22fa170b4c5340dbdda5c8cd88fb205 to before 0021eb09041f021c079be1022934a280f7f176c0Affected

LinuxLinux

3.7Affected
before 3.7Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.