https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 16:57:24 +0000 https://vulnerability.circl.lu/vuln/cve-2026-80605 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()</p> <p>In picolcd_send_and_wait(), an integer overflow of the signed loop counter &#39;k&#39; can theoretically lead to a NULL pointer dereference of &#39;raw_data&#39;. If the loop executes more than INT_MAX times, &#39;k&#39; becomes negative, making the condition &#39;k &lt; size&#39; true even when &#39;size&#39; is 0.</p> <p>Change the type of &#39;k&#39; to &#39;unsigned int&#39; to prevent the overflow and eliminate the out-of-bounds access.</p> <p>Found by Linux Verification Center (linuxtesting.org) with the Svace static analysis tool.</p> <p>[jkosina@suse.com: extended hash length]</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()</p> <p>In picolcd_send_and_wait(), an integer overflow of the signed loop counter &#39;k&#39; can theoretically lead to a NULL pointer dereference of &#39;raw_data&#39;. If the loop executes more than INT_MAX times, &#39;k&#39; becomes negative, making the condition &#39;k &lt; size&#39; true even when &#39;size&#39; is 0.</p> <p>Change the type of &#39;k&#39; to &#39;unsigned int&#39; to prevent the overflow and eliminate the out-of-bounds access.</p> <p>Found by Linux Verification Center (linuxtesting.org) with the Svace static analysis tool.</p> <p>[jkosina@suse.com: extended hash length]</p> https://vulnerability.circl.lu/vuln/cve-2026-80605