CVE Explorer

CVE-2026-64014

In the Linux kernel, the following vulnerability has been resolved: Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size nexio_read_data() pulls data_len and x_len from a packed __be16 header in the device's interrupt packet and then walks packet->data[0..x_len) and packet->data[x_len..data_len) comparing each byte against a threshold. Both fields are 16-bit on the wire (max 65535). The existing adjustments shave at most 0x100 / 0x80 off, so the loop bound can still reach ro

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:2007cc49f56c11af5c99aa3ae2ed680a62c22a6e3849415d5ffc7c3d092e7126

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/input/touchscreen/usbtouchscreen.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"45c829e5eb3b974282bae50b7cca2cc891f74f0b","status":"affected","version":"5197424cdcccd2b0b1922babb93969b2515c43ce","versionType":"git"},{"lessThan":"e7cdcb266ba06d8480809b78ab8bb2bf8ff51ccb","status":"affected","version":"5197424cdcccd2b0b1922babb93969b2515c43ce","versionType":"git"},{"lessThan":"95f47331dfde243f93e679ce70bd0c24b37c683d","status":"affected","version":"519…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a3805645a2d2ecf2be40571d7d11e238745efcdc36e5c61677a8e9eb3bf7a66c · sha256:2853ca000c31cf07… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/input/touchscreen/usbtouchscreen.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.34"},{"lessThan":"2.6.34","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","version…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a3805645a2d2ecf2be40571d7d11e238745efcdc36e5c61677a8e9eb3bf7a66c · sha256:2853ca000c31cf07… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a3805645a2d2ecf2be40571d7d11e238745efcdc36e5c61677a8e9eb3bf7a66c · sha256:2853ca000c31cf07… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a3805645a2d2ecf2be40571d7d11e238745efcdc36e5c61677a8e9eb3bf7a66c · sha256:2853ca000c31cf07… · /containers/cna/affected/1

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/0ca809ea8e0355299266c46e5f1755040aa8dcf3"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a3805645a2d2ecf2be40571d7d11e238745efcdc36e5c61677a8e9eb3bf7a66c · sha256:2853ca000c31cf07… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/103d2de9f505f56da173e43f12dba62f92620278"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a3805645a2d2ecf2be40571d7d11e238745efcdc36e5c61677a8e9eb3bf7a66c · sha256:2853ca000c31cf07… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/2905281cbda52ec9df540113b35b835feb5fafd3"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a3805645a2d2ecf2be40571d7d11e238745efcdc36e5c61677a8e9eb3bf7a66c · sha256:2853ca000c31cf07… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/45c829e5eb3b974282bae50b7cca2cc891f74f0b"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a3805645a2d2ecf2be40571d7d11e238745efcdc36e5c61677a8e9eb3bf7a66c · sha256:2853ca000c31cf07… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/7585b6aa55d8ac85ad22f522e1059f93507727b6"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a3805645a2d2ecf2be40571d7d11e238745efcdc36e5c61677a8e9eb3bf7a66c · sha256:2853ca000c31cf07… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/95f47331dfde243f93e679ce70bd0c24b37c683d"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a3805645a2d2ecf2be40571d7d11e238745efcdc36e5c61677a8e9eb3bf7a66c · sha256:2853ca000c31cf07… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/d883312061ccde8c536595998aaf687ec070077c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a3805645a2d2ecf2be40571d7d11e238745efcdc36e5c61677a8e9eb3bf7a66c · sha256:2853ca000c31cf07… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/e7cdcb266ba06d8480809b78ab8bb2bf8ff51ccb"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a3805645a2d2ecf2be40571d7d11e238745efcdc36e5c61677a8e9eb3bf7a66c · sha256:2853ca000c31cf07… · /containers/cna/references/1

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer