CVE Explorer

CVE-2026-46232

In the Linux kernel, the following vulnerability has been resolved: HID: playstation: Clamp num_touch_reports A device would never lie about the number of touch reports would it? If it does the loop in dualshock4_parse_report will read off the end of the touch_reports array, up to about 2 KiB for the maximum number of 256 loop iteraions. The data that is read is emitted via evdev if the DS4_TOUCH_POINT_INACTIVE bit happens to be set. Protect against this by clamping the num_touch_reports valu

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:5b555b9f483f2cb2dcac2c70943dc9e1a79138bd04b8760bae44c0101c9c7096

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/hid/hid-playstation.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"0bc4cf1a6ba00fb8c074531b179bc7b97502fbc4","status":"affected","version":"752038248808a7ff176bbdb668f19ae7d2a9816b","versionType":"git"},{"lessThan":"9c031b24aed6733b6dcc5d98527875b8654a04e9","status":"affected","version":"752038248808a7ff176bbdb668f19ae7d2a9816b","versionType":"git"},{"lessThan":"7812694752a5f295eaa05a093b90a2c332666051","status":"affected","version":"752038248808a7ff…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:7dc7a9b19cf2659ec3e40bcbcb2b04aff650e95e5ed96fb3d6eab019e4b133f4 · sha256:261217d1c149a1c4… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/hid/hid-playstation.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.2"},{"lessThan":"6.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.140","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.90","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.32","versionType":"semver"},{"les…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:7dc7a9b19cf2659ec3e40bcbcb2b04aff650e95e5ed96fb3d6eab019e4b133f4 · sha256:261217d1c149a1c4… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:7dc7a9b19cf2659ec3e40bcbcb2b04aff650e95e5ed96fb3d6eab019e4b133f4 · sha256:261217d1c149a1c4… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:7dc7a9b19cf2659ec3e40bcbcb2b04aff650e95e5ed96fb3d6eab019e4b133f4 · sha256:261217d1c149a1c4… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":8.1,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:7dc7a9b19cf2659ec3e40bcbcb2b04aff650e95e5ed96fb3d6eab019e4b133f4 · sha256:261217d1c149a1c4… · /containers/cna/metrics/0/cvssV3_1

Source references

5 source assertions

{"url":"https://git.kernel.org/stable/c/0bc4cf1a6ba00fb8c074531b179bc7b97502fbc4"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:7dc7a9b19cf2659ec3e40bcbcb2b04aff650e95e5ed96fb3d6eab019e4b133f4 · sha256:261217d1c149a1c4… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/208f6d5b1dfd6399bc6af9e11f27f1f496243ed0"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:7dc7a9b19cf2659ec3e40bcbcb2b04aff650e95e5ed96fb3d6eab019e4b133f4 · sha256:261217d1c149a1c4… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/7812694752a5f295eaa05a093b90a2c332666051"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:7dc7a9b19cf2659ec3e40bcbcb2b04aff650e95e5ed96fb3d6eab019e4b133f4 · sha256:261217d1c149a1c4… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/9c031b24aed6733b6dcc5d98527875b8654a04e9"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:7dc7a9b19cf2659ec3e40bcbcb2b04aff650e95e5ed96fb3d6eab019e4b133f4 · sha256:261217d1c149a1c4… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/cac61b58a3b6340c52afa06bb15eac033158db2f"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:7dc7a9b19cf2659ec3e40bcbcb2b04aff650e95e5ed96fb3d6eab019e4b133f4 · sha256:261217d1c149a1c4… · /containers/cna/references/4

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer