CVE-2026-64275

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> Input: elan_i2c - prevent division by zero and arithmetic underflow<br /> <br /> The Elan I2C touchpad driver queries the device for its physical<br /> dimensions and trace counts to calculate the device resolution and width.<br /> However, if the device firmware or device tree provides invalid zero<br /> values for x_traces or y_traces, it results in a fatal division-by-zero<br /> exception leading to a kernel panic during device probe.<br /> <br /> Add checks to ensure these parameters are non-zero before performing<br /> the division. If invalid trace values are detected, fall back to a safe<br /> default of 1.<br /> <br /> Additionally, prevent an arithmetic underflow in the touch reporting<br /> logic. Previously, if the calculated or fallback width was smaller than<br /> ETP_FWIDTH_REDUCE (90), the subtraction would underflow, resulting in a<br /> massive unsigned integer being reported to userspace. Clamp the adjusted<br /> width to a minimum of 0 to safely handle small physical dimensions and<br /> fallback scenarios.<br /> <br /> Completing the probe with safe fallback values ensures the sysfs nodes<br /> are created, keeping the firmware update path intact so a recovery<br /> firmware can be flashed to the device.