CVE-2026-64237

A flaw was found in the Linux kernel's Elan I2C touchpad driver. This vulnerability allows a local user to cause a Denial of Service (DoS) by triggering a system crash. The issue occurs because the driver does not verify that a firmware file is sufficiently large before attempting to access its data pages and trailing signature. By supplying a malformed or undersized firmware image, an attacker can trigger an out-of-bounds memory read.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.