Is there a patch available for CVE-2026-80595?

Yes, a patch is available for CVE-2026-80595. Update the affected software to the latest version immediately.

Linux CVE-2026-80595

EUVD-2026-67471

2026-08-28 Linux

GHSA-xgp4-6595-v35f

Buffer Overflow Linux

View

Awaiting Data No severity or threat signals available yet. Label will update when CVSS score is published or threat intelligence arrives. Why: No CVSS yet + weak signal (CWE or non-zero EPSS).

Patch available 0.2% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisCVE.org

In the Linux kernel, the following vulnerability has been resolved:

Input: ims-pcu - add response length checks

The driver processes response data from device buffers without verifying that the device actually sent enough data. This can lead to out-of-bounds reads or processing stale data.

Add checks for the expected response length before accessing the buffers.

Affected VersionsENISA

Linux patch: 5.10.261

Linux patch: 7.1.5

Linux 628329d52474323938a03826941e166bc7c8eff4 <89cf4d18ff87efa5c47ba38de36aea5c03f98b05

Linux 628329d52474323938a03826941e166bc7c8eff4 <bbafb75cd9da50d86335cbd98b8b3492bb5e42a6

Linux patch: 7.2

Linux 628329d52474323938a03826941e166bc7c8eff4 <3e0e8d7f8139a9496e389e7372e3f8b57b3e4e3e

Linux patch: 6.18.40

Linux 628329d52474323938a03826941e166bc7c8eff4 <48c9d92fd4ee3a8f5d2cb46c802a0eff8e67c79c

Linux 628329d52474323938a03826941e166bc7c8eff4 <dc9fdb538ce5b7f32540991f4a25ab63fab7ba07

Linux 3.10

Linux 628329d52474323938a03826941e166bc7c8eff4 <f7f5afeed31baaca0b027c2d46a25ee86fb4c9da

Linux patch: 6.12.97

Linux 628329d52474323938a03826941e166bc7c8eff4 <f3c63aecca90be42b66cdc66de7c4a6104104d17

Linux patch: 5.15.212

Linux patch: 6.6.145

Linux 628329d52474323938a03826941e166bc7c8eff4 <f28c5cabb2df09ad1fcfb7cdb2b3ed2f690d81f0

Linux patch: 6.1.178

Linux patch: 0

Affected Packages

euvd linux no fix

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Know when the next one hits your stack

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Lifecycle Timeline

Patch available

Aug 28, 2026 - 09:02 EUVD

CVE Published

Aug 28, 2026 - 06:48 cve.org

UNKNOWN (no severity yet)

Threat Intelligence Overview

EPSS Score

0.2%

Top 93% exploitable

Data Quality

1 sources

Confidence: Low

EUVD

CVE.org

EPSS

VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity Not scored yet

CISA KEV No

Public POC No

EPSS 0.2%

Patch available Yes

Active threat No

Deciding rule

No CVSS yet + weak signal (CWE or non-zero EPSS)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

Attack Technique

Buffer Overflow HIGH

A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.