CVE-2026-64367

kernel: HID: hid-goodix-spi: validate report size to prevent stack buffer overflow

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 25, 2026

Updated · July 29, 2026

Description

A flaw was found in the Linux kernel's hid-goodix-spi driver. This vulnerability, a stack buffer overflow, allows a local attacker to provide an oversized report to the system. This can lead to a buffer overflow, potentially enabling the attacker to execute arbitrary code with elevated privileges or cause the system to crash, resulting in a denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')