All vulnerabilities
CVE-2026-98206

Linux: Input: cyttsp5 - clamp the HID report size before memcpy

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.18%Chance of exploitation activity in the next 30 days, higher than 6% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in9eb261092d4c967679fa351b7190c6d9082b07c5Also 495955feb57750de4a641da13d7e51fb4d0a9764, 85f080fb87ed5cd3e46121be677f52c82f26a0abCVE List
Published6 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 9eb261092d4c967679fa351b7190c6d9082b07c5LinuxCVE List
  • 495955feb57750de4a641da13d7e51fb4d0a9764LinuxCVE List
  • 85f080fb87ed5cd3e46121be677f52c82f26a0abLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: cyttsp5 - clamp the HID report size before memcpy

The size field comes from the device and is used as the memcpy() length into response_buf, which is CY_MAX_INPUT bytes.

Text from CVE List

Affected versions 12

  • Linuxaffected: 5b0c03e24a061f9c9e8b28fa157b80990c559a37 before b172c69e67bc71f71f6e3d8b3258b3dec29e42c6CVE List
  • Linuxaffected: 5b0c03e24a061f9c9e8b28fa157b80990c559a37 before d41a80d852f2948c6d388c520e76c0a72897f003CVE List
  • Linuxaffected: 5b0c03e24a061f9c9e8b28fa157b80990c559a37 before 9eb261092d4c967679fa351b7190c6d9082b07c5CVE List
  • Linuxaffected: 5b0c03e24a061f9c9e8b28fa157b80990c559a37 before 495955feb57750de4a641da13d7e51fb4d0a9764CVE List
  • Linuxaffected: 5b0c03e24a061f9c9e8b28fa157b80990c559a37 before 85f080fb87ed5cd3e46121be677f52c82f26a0abCVE List
  • Linuxaffected: 6.2CVE List
  • Linuxunaffected: all versions before 6.2CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.112 through 6.12.*CVE List
  • Linuxunaffected: 6.18.54 through 6.18.*CVE List
  • Linuxunaffected: 7.2.8 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 5