Riskcovery

CVE-2026-98206

Input: cyttsp5 - clamp the HID report size before memcpy

State
Published
Severity
Not scored
Published
Oct 6, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: cyttsp5 - clamp the HID report size before memcpy

The size field comes from the device and is used as the memcpy() length into response_buf, which is CY_MAX_INPUT bytes.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5b0c03e24a061f9c9e8b28fa157b80990c559a37 to before b172c69e67bc71f71f6e3d8b3258b3dec29e42c6Affected
  • 5b0c03e24a061f9c9e8b28fa157b80990c559a37 to before d41a80d852f2948c6d388c520e76c0a72897f003Affected
  • 5b0c03e24a061f9c9e8b28fa157b80990c559a37 to before 9eb261092d4c967679fa351b7190c6d9082b07c5Affected
  • 5b0c03e24a061f9c9e8b28fa157b80990c559a37 to before 495955feb57750de4a641da13d7e51fb4d0a9764Affected
  • 5b0c03e24a061f9c9e8b28fa157b80990c559a37 to before 85f080fb87ed5cd3e46121be677f52c82f26a0abAffected
LinuxLinux
  • 6.2Affected
  • before 6.2Not affected
  • 6.6.158 through 6.6.*Not affected
  • 6.12.112 through 6.12.*Not affected
  • 6.18.54 through 6.18.*Not affected
  • 7.2.8 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.