https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 03:55:57 +0000 https://vulnerability.circl.lu/vuln/cve-2026-80594 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing</p> <p>The driver parses CDC union descriptors in ims_pcu_get_cdc_union_desc() by iterating through the extra descriptor data. However, it does not verify that the bLength of each descriptor is at least 2. A malicious device could provide a descriptor with bLength = 0, leading to an infinite loop in the driver.</p> <p>Add a check to ensure bLength is at least 2 before proceeding with parsing.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing</p> <p>The driver parses CDC union descriptors in ims_pcu_get_cdc_union_desc() by iterating through the extra descriptor data. However, it does not verify that the bLength of each descriptor is at least 2. A malicious device could provide a descriptor with bLength = 0, leading to an infinite loop in the driver.</p> <p>Add a check to ensure bLength is at least 2 before proceeding with parsing.</p> https://vulnerability.circl.lu/vuln/cve-2026-80594