In the Linux kernel, the following vulnerability has been resolved:
HID: multitouch: Check to ensure report responses match the request
It is possible for a malicious (or clumsy) device to respond to a
specific report's feature request using a completely different report
ID. This can cause confusion in the HID core resulting in nasty
side-effects such as OOB writes.
Add a check to ensure that the report ID in the response, matches the
one that was requested. If it doesn't, omit reporting the raw event and
return early.
References
Configurations
Configuration 1 (hide)
|
History
08 May 2026, 13:50
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://git.kernel.org/stable/c/2edc92f89eee328b5be5706b5d431bf90669e9c0 - Patch | |
| References | () https://git.kernel.org/stable/c/516da3f25cfe18643835af1cf09b0e9ffc36c383 - Patch | |
| References | () https://git.kernel.org/stable/c/6a4acd3e86fe5584050c213d95147eba33856033 - Patch | |
| References | () https://git.kernel.org/stable/c/74c6015375d8b9bc1b1eb79f20636c8e894bcad7 - Patch | |
| References | () https://git.kernel.org/stable/c/7f66fdbc077faed3b52519228d21d81979e92249 - Patch | |
| References | () https://git.kernel.org/stable/c/a61163daf8a90b4a7ef154d5fc9c525f665734e3 - Patch | |
| References | () https://git.kernel.org/stable/c/c7a27bb4d0f6573ca0f9c7ef0b63291486239190 - Patch | |
| References | () https://git.kernel.org/stable/c/e716edafedad4952fe3a4a273d2e039a84e8681a - Patch | |
| CPE | cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:4.3.6:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* |
|
| CWE | CWE-787 | |
| First Time |
Linux linux Kernel
Linux |
03 May 2026, 07:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
01 May 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-01 15:16
Updated : 2026-05-08 13:50
NVD link : CVE-2026-43047
Mitre link : CVE-2026-43047
CVE.ORG link : CVE-2026-43047
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-787
Out-of-bounds Write