CVE-2026-64274

kernel: Input: goodix - clamp the device-reported contact count

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 25, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's Goodix touchscreen driver. An attacker with physical access to the I2C bus, or a malicious touchscreen controller, could exploit a vulnerability where the driver fails to properly validate the number of reported touch points. This could lead to a stack out-of-bounds write, potentially causing a system crash (denial of service).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-787 · Out-of-bounds Write