CVE-2026-64366

A flaw was found in the Linux kernel's Wacom Human Interface Device (HID) driver. This vulnerability occurs in the wacom_wac_queue_insert function when handling incoming reports. Improper management of the kernel's internal buffer (kfifo) can lead to a slab-out-of-bounds write, allowing an attacker to corrupt memory. This memory corruption could potentially result in a denial of service or, in some cases, arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.