CVE-2026-98206
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: Input: cyttsp5 - clamp the HID report size before memcpy The size field comes from the device and is used as the memcpy() length into response_buf, which is CY_MAX_INPUT bytes.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedOct 6, 2026
First seenOct 6, 2026
How to fix
Update
- Linux Linuxb172c69e67bc71f71f6e3d8b3258b3dec29e42c6, d41a80d852f2948c6d388c520e76c0a72897f003, 9eb261092d4c967679fa351b7190c6d9082b07c5, 495955feb57750de4a641da13d7e51fb4d0a9764, 85f080fb87ed5cd3e46121be677f52c82f26a0ab or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 5b0c03e24a061f9c9e8b28fa157b80990c559a37 ≤ v < b172c69e67bc71f71f6e3d8b3258b3dec29e42c6, 5b0c03e24a061f9c9e8b28fa157b80990c559a37 ≤ v < d41a80d852f2948c6d388c520e76c0a72897f003, 5b0c03e24a061f9c9e8b28fa157b80990c559a37 ≤ v < 9eb261092d4c967679fa351b7190c6d9082b07c5, 5b0c03e24a061f9c9e8b28fa157b80990c559a37 ≤ v < 495955feb57750de4a641da13d7e51fb4d0a9764, 5b0c03e24a061f9c9e8b28fa157b80990c559a37 ≤ v < 85f080fb87ed5cd3e46121be677f52c82f26a0ab, 6.2 | b172c69e67bc71f71f6e3d8b3258b3dec29e42c6, d41a80d852f2948c6d388c520e76c0a72897f003, 9eb261092d4c967679fa351b7190c6d9082b07c5, 495955feb57750de4a641da13d7e51fb4d0a9764, 85f080fb87ed5cd3e46121be677f52c82f26a0ab |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.