CVE-2026-46232
kernel: HID: playstation: Clamp num_touch_reports
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 28, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's Human Interface Device (HID) PlayStation driver. A malicious device could provide an excessively large number of touch reports, leading to an out-of-bounds read in the dualshock4_parse_report function. This could allow an attacker to read up to 2 KiB of kernel memory, potentially leading to information disclosure.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-805 · Buffer Access with Incorrect Length Value