CVE-2026-80578

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the fb io read() function where a pointer desynchronization occurs if copy to user() performs a partial copy, such as when a user buffer is faulty. In this scenario, the hardware src pointer is advanced by the full chunk size, but the remaining count is only decremented by the number of successfully copied bytes. If the loop continues, the read resumes from an incorrect offset, causing subsequent iterations to perform more hardware reads than intended, which leads to out-of-bounds I/O reads.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.