01 Record

CVE-2026-80768

HID: ft260: fix stack-use-after-return write in I2C read race

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

HID: ft260: fix stack-use-after-return write in I2C read race

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.17% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 7.1% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-10-19.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2026-09-04 15:12Z1 MO AGO
Last updated: 2026-10-19 08:43Z10 DAYS AGO
Reserved: 2026-08-26
Assigning CNA: Linux
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: 87ab1fb79dc5d069a3a87bc1bd287a54ebcfe541e7114815e095644d75f9b58e

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux6a82582d9fa438045191074856f47165334f2777 to < 2b907001e8a83cdb71e899fd3d77ab51e2c03f10, 6a82582d9fa438045191074856f47165334f2777 to < 90e9298f2e4336a0e1ca7eeb173403df78056164, 6a82582d9fa438045191074856f47165334f2777 to < 460514d46e8892189fc933a1b4433811cfa5c309, 6a82582d9fa438045191074856f47165334f2777 to < 5aa5a1b7cc4b4bec5497ad9ef113fdfe37b232f3, 6a82582d9fa438045191074856f47165334f2777 to < a8e1f970f9040294cfd9100c681c32af6c2aeec0, 6a82582d9fa438045191074856f47165334f2777 to < d7ffbdc076675c84128d5b904e4d5167fe9f3a7f, 6a82582d9fa438045191074856f47165334f2777 to < 77832d8f1c81d9f84b6b54807fb278586001d754, 6a82582d9fa438045191074856f47165334f2777 to < bf3e39df3a397fd82967a31d17c4e02c7feab221, 5.13—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/2b907001e8a83cdb71e899fd3d77ab51e2c03f10
git.kernel.orghttps://git.kernel.org/stable/c/90e9298f2e4336a0e1ca7eeb173403df78056164
git.kernel.orghttps://git.kernel.org/stable/c/460514d46e8892189fc933a1b4433811cfa5c309
git.kernel.orghttps://git.kernel.org/stable/c/5aa5a1b7cc4b4bec5497ad9ef113fdfe37b232f3
git.kernel.orghttps://git.kernel.org/stable/c/a8e1f970f9040294cfd9100c681c32af6c2aeec0
git.kernel.orghttps://git.kernel.org/stable/c/d7ffbdc076675c84128d5b904e4d5167fe9f3a7f
git.kernel.orghttps://git.kernel.org/stable/c/77832d8f1c81d9f84b6b54807fb278586001d754
git.kernel.orghttps://git.kernel.org/stable/c/bf3e39df3a397fd82967a31d17c4e02c7feab221

07 Fixed in

Debian 12

linux
Fixed in 6.1.187-1
linux-6.12
Fixed in 6.12.111-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.111-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.1.12-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.