CVE-2026-80605

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An integer overflow of the signed loop counter k in the picolcd send and wait() function can lead to a NULL pointer dereference of raw data. This occurs if the loop executes more than INT MAX times, causing k to become negative and making the condition k < size true even when size is 0, resulting in out-of-bounds access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.