CVE-2026-64237

Published: Jul 24, 2026Modified: Aug 12, 2026

7.1

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Exploitability: 1.8 / Impact: 5.2

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature (which resides at the end of the firmware blob) before accessing them to prevent potential out-of-bounds reads.

Affected (12)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 4.0 to 5.10.259
Linux Linux Kernel	From 5.11 to 5.15.210
Linux Linux Kernel	From 5.16 to 6.1.176
Linux Linux Kernel	From 6.13 to 6.18.35
Linux Linux Kernel	From 6.19 to 7.0.12
Linux Linux Kernel	From 6.2 to 6.6.143
Linux Linux Kernel	From 6.7 to 6.12.93
Linux Linux Kernel	Version 7.1 rc1
Linux Linux Kernel	Version 7.1 rc2
Linux Linux Kernel	Version 7.1 rc3
Linux Linux Kernel	Version 7.1 rc4
Linux Linux Kernel	Version 7.1 rc5