CVE-2026-80574
High
Description
In the Linux kernel, the following vulnerability has been resolved: Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet Make finger2 (and also finger1) unsigned, so that if the finger index in the packet is 0 then subtracting 1 creates an array index which overflows above the existing check for FOC_MAX_FINGERS, as the existing comment says it should, instead of writing to state->fingers[-1].
SeverityHigh
CVSS8.4
Exploit probability—
Product
Linux
PublishedAug 26, 2026
First seenAug 26, 2026
How to fix
Update
- Linux Linux063b4c6a6f3fc01bca085c442000c9c100fdbd93, bb502d79acb9ac1e0a77fa8bc7b7b4729140b11f, ca92c98b806839c108995b2bbff7061515bdfb53, 81b07470cb2937ceb74b00be88151582a322433b, 6f6d5fe29efdf5001bc146fc292e6592cace93eb, 83c265bfc084d77e2171d4b67362150ab38c935b, 1842e47126816e56d30c4f856f9854fd7831066c, 296736076b3fd078742651c719555a488624023a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 05be1d079ec0b3691783e4384b1ada82149ff7d2 ≤ v < 063b4c6a6f3fc01bca085c442000c9c100fdbd93, 05be1d079ec0b3691783e4384b1ada82149ff7d2 ≤ v < bb502d79acb9ac1e0a77fa8bc7b7b4729140b11f, 05be1d079ec0b3691783e4384b1ada82149ff7d2 ≤ v < ca92c98b806839c108995b2bbff7061515bdfb53, 05be1d079ec0b3691783e4384b1ada82149ff7d2 ≤ v < 81b07470cb2937ceb74b00be88151582a322433b, 05be1d079ec0b3691783e4384b1ada82149ff7d2 ≤ v < 6f6d5fe29efdf5001bc146fc292e6592cace93eb, 05be1d079ec0b3691783e4384b1ada82149ff7d2 ≤ v < 83c265bfc084d77e2171d4b67362150ab38c935b, 05be1d079ec0b3691783e4384b1ada82149ff7d2 ≤ v < 1842e47126816e56d30c4f856f9854fd7831066c, 05be1d079ec0b3691783e4384b1ada82149ff7d2 ≤ v < 296736076b3fd078742651c719555a488624023a, 4.0 | 063b4c6a6f3fc01bca085c442000c9c100fdbd93, bb502d79acb9ac1e0a77fa8bc7b7b4729140b11f, ca92c98b806839c108995b2bbff7061515bdfb53, 81b07470cb2937ceb74b00be88151582a322433b, 6f6d5fe29efdf5001bc146fc292e6592cace93eb, 83c265bfc084d77e2171d4b67362150ab38c935b, 1842e47126816e56d30c4f856f9854fd7831066c, 296736076b3fd078742651c719555a488624023a |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.