CVE-2026-64270
kernel: Input: mms114 - reject an oversized device packet size
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 25, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel mms114 touchscreen driver. The device-reported packet size is used as the length of an I2C read into an 80-byte stack buffer and is never checked against that buffer. A malicious or faulty controller can write up to 255 bytes past the end of the buffer.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-787 · Out-of-bounds Write