CVE-2026-46232
Description
In the Linux kernel, the following vulnerability has been resolved: HID: playstation: Clamp num_touch_reports A device would never lie about the number of touch reports would it? If it does the loop in dualshock4_parse_report will read off the end of the touch_reports array, up to about 2 KiB for the maximum number of 256 loop iteraions. The data that is read is emitted via evdev if the DS4_TOUCH_POINT_INACTIVE bit happens to be set. Protect against this by clamping the num_touch_reports value provided by the device to the maximum size of the touch_reports array.
How to fix
- linux linux_kernel6.6.140, 6.12.90, 6.18.32, 7.0.9 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 6.2 ≤ v < 6.6.140, 6.7 ≤ v < 6.12.90, 6.13 ≤ v < 6.18.32, 6.19 ≤ v < 7.0.9, 7.1 | 6.6.140, 6.12.90, 6.18.32, 7.0.9 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.