CVE-2026-89619

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A buffer overflow exists in the intel-thc-hid driver within the intel-quickspi component. The function quickspi hid raw request() receives a buffer length via the len variable, but this length is not passed to quickspi get report(). Consequently, quickspi get report() copies the entire device-supplied response into the buf variable using memcpy(), regardless of the buffer's actual size. Because buf is sized based on the caller's request through HIDIOCGFEATURE or HIDIOCGINPUT, a response larger than the allocated size allows device-controlled content to overflow the buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.