CVE-2026-64237

HighCVSS 7.1/10Last modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: elan_i2c - validate firmware size before use

Ensure that the firmware file is large enough to contain the expected number of pages and the signature (which resides at the end of the firmware blob) before accessing them to prevent potential out-of-bounds reads.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
LinuxLinux>= bb03bf3f8427a38112819061fc8688999ba02f67, < 47b52b98edfe34d0249e72f815215ef24311c3a3; >= bb03bf3f8427a38112819061fc8688999ba02f67, < c2c3b33b3c0bf2c9427c0926817ef5ffac50de6f; >= bb03bf3f8427a38112819061fc8688999ba02f67, < 331d49b4e1c9efe4479bbd22922dfcdd8c64be7b; >= bb03bf3f8427a38112819061fc8688999ba02f67, < 48b0aa9c08a3ac8e0c0345b7ca581f552324e460; >= bb03bf3f8427a38112819061fc8688999ba02f67, < 3b37190ad3ded3a15fb1dbfc4f26df520a3e59bb; >= bb03bf3f8427a38112819061fc8688999ba02f67, < bf769358419e00344c1b16fa034d058f563d46a1; >= bb03bf3f8427a38112819061fc8688999ba02f67, < d97baee9590edf303b3eca432e61de9320834fe1; >= bb03bf3f8427a38112819061fc8688999ba02f67, < 76b0d0baa9ae9c60e726bbe1b6ff0bec2c993634
LinuxLinux4.0

References

Timeline

Published
Jul 24, 2026
Last modified
Nov 6, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-642385.5In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix deadlock on shared proxy's parent removal Commit 710CVE-2026-642397.8In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: delete tried region in regions_rmdirs() DAMON CVE-2026-64246.7Use-after-free vulnerability in ESET Linux products potentially allowed an attacker to trigger kernel panic on the systemCVE-2026-642405.5In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: fix control request setup packet Commit eac694CVE-2026-642415.5In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: teardown bugs and resource leaks Address several teardCVE-2026-642427.8In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe error path usb_initialiCVE-2026-642437.1In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simple_mux_conCVE-2026-642445.5In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: set mem->altmap after successful device registratiCVE-2026-642457.8In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fb_find_mode() If mode_option is CVE-2026-642467.8In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-after-free in the linkstatiCVE-2026-642478.4In the Linux kernel, the following vulnerability has been resolved: KVM: x86: hyper-v: Bound the bank index when querying sparse banks WheCVE-2026-642485.5In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: report dying CPU to RCU in stop_this_cpu() smp_send_stop()
CVE-2026-64237: High severity, CVSS 7.1 | Vulnix