CVE-2026-89619

CVE-2026-89619 affects the Linux kernel intel-thc-hid driver (Intel QuickSPI HID). The root cause is a buffer overflow in quickspi_get_report(): the function copies the entire device-supplied report into the caller's buffer without validating that the response length does not exceed the buffer si...