CVE-2026-64272

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
25/07/2026
Last modified:
30/07/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> Input: mms114 - fix touch indexing for MMS134S and MMS136<br /> <br /> The MMS134S and MMS136 touch controllers have an event size of 6 bytes<br /> rather than 8 bytes. When __mms114_read_reg() reads the touch data<br /> packet from the device into the touch buffer, the events are packed<br /> tightly at 6-byte intervals. However, the driver iterates through the<br /> events using standard C array indexing (touch[index]), where each<br /> element is sizeof(struct mms114_touch) (8 bytes) apart. As a result, any<br /> touch events beyond the first one are read from incorrect offsets and<br /> parsed improperly.<br /> <br /> Fix this by explicitly calculating the byte offset for each touch event<br /> based on the device&amp;#39;s specific event size.

Impact