CVE-2026-80593

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the atk ec present() function within the asus atk0110 driver. The function processes the management group package from the GGRP ACPI method and accesses the first element of each sub-package without verifying if the sub-package is non-empty. Because ACPICA allocates the element array based on the package.count value, a sub-package with a zero count allows the system to read memory beyond the allocated buffer when processing malformed firmware packages.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.