Back to CVE records
Not yet scoredPublished Oct 6, 2026
CVE-2026-98206Input: cyttsp5 - clamp the HID report size before memcpy
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: Input: cyttsp5 - clamp the HID report size before memcpy The size field comes from the device and is used as the memcpy() length into response_buf, which is CY_MAX_INPUT bytes.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 6, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 5b0c03e24a061f9c9e8b28fa157b80990c559a37 before b172c69e67bc71f71f6e3d8b3258b3dec29e42c6; from 5b0c03e24a061f9c9e8b28fa157b80990c559a37 before d41a80d852f2948c6d388c520e76c0a72897f003; from 5b0c03e24a061f9c9e8b28fa157b80990c559a37 before 9eb261092d4c967679fa351b7190c6d9082b07c5; from 5b0c03e24a061f9c9e8b28fa157b80990c559a37 before 495955feb57750de4a641da13d7e51fb4d0a9764; from 5b0c03e24a061f9c9e8b28fa157b80990c559a37 before 85f080fb87ed5cd3e46121be677f52c82f26a0ab | CNA record |
References
- https://git.kernel.org/stable/c/b172c69e67bc71f71f6e3d8b3258b3dec29e42c6
- https://git.kernel.org/stable/c/d41a80d852f2948c6d388c520e76c0a72897f003
- https://git.kernel.org/stable/c/9eb261092d4c967679fa351b7190c6d9082b07c5
- https://git.kernel.org/stable/c/495955feb57750de4a641da13d7e51fb4d0a9764
- https://git.kernel.org/stable/c/85f080fb87ed5cd3e46121be677f52c82f26a0ab
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.