CVE-2026-46097

Input: edt-ft5x06 - fix use-after-free in debugfs teardown

State
Published
Severity
Not scored
Published
May 27, 2026
Updated
Jun 14, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: edt-ft5x06 - fix use-after-free in debugfs teardown

The commit 68743c500c6e ("Input: edt-ft5x06 - use per-client debugfs directory") removed the manual debugfs teardown, relying on the I2C core to handle it. However, this creates a window where debugfs files are still accessible after edt_ft5x06_ts_teardown_debugfs() frees tsdata->raw_buffer.

To prevent a use-after-free, protect the freeing of raw_buffer with the device mutex and set raw_buffer to NULL. The debugfs read function already checks if raw_buffer is NULL under the same mutex, so this safely avoids the use-after-free.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 68743c500c6eafcd0b16dc6067fea5bca0795eef to before a516d43886623e3cca5fa3446bed8fc7c7982be2Affected
  • 68743c500c6eafcd0b16dc6067fea5bca0795eef to before 9f6c5e7b747d40e1c65cbfcb975857d25154c075Affected
  • 68743c500c6eafcd0b16dc6067fea5bca0795eef to before f5f9e07060519e2287e99019a6de1eb3ebb65c37Affected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.18.27 through 6.18.*Not affected
  • 7.0.4 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.