{"apiVersion":"1.0","identifier":"CVE-2026-80605","description":"In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() In picolcd_send_and_wait(), an integer overflow of the signed loop counter -k- can theoretically lead to a NULL pointer dereference of -raw_data-. If the loop executes more than INT_MAX times, -k- becomes negative, making the condition -k < size- true even when -size- is 0. Change the type of -k- to -unsigned int- to prevent the overflow and eliminate the out-of-bounds access. Found by Linux Verification Center (linuxtesting.org) with the Svace static analysis tool. [jkosina@suse.com: extended hash length]","publishedAt":"2026-08-28T08:16:44","lastModifiedAt":"2026-08-28T08:16:44","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-80605","cvssScore":null,"cvssVector":"Pending","epssProbability":0.00176,"riskScore":0,"affectedProduct":"linux","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-80605","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-80605","en":"https://www.redsauce.net/en/cves/CVE-2026-80605","fr":"https://www.redsauce.net/fr/cves/CVE-2026-80605","pt":"https://www.redsauce.net/pt/cves/CVE-2026-80605","de":"https://www.redsauce.net/de/cves/CVE-2026-80605","sk":"https://www.redsauce.net/sk/cves/CVE-2026-80605","el":"https://www.redsauce.net/el/cves/CVE-2026-80605"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-80605"}}