CVE-2026-80566

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> Input: hynitron_cstxxx - validate touch count and finger IDs<br /> <br /> The driver allocates max_touch_num input slots, which are indexed from<br /> zero through max_touch_num - 1. The current check allows a finger ID<br /> equal to max_touch_num to reach cst3xx_report_contact(). While the input<br /> core ignores out-of-range slot indices, reporting touch data without a<br /> valid slot change corrupts the touch state of the previously active slot.<br /> <br /> The touch count is read from the controller&amp;#39;s report and is used to<br /> index the fixed-size report buffer without first checking its range.<br /> Reject counts larger than the supported number of touch slots before<br /> checking the trailing byte or parsing touch data.<br /> <br /> Reject finger IDs equal to or greater than max_touch_num, and return<br /> immediately when an invalid finger ID is encountered so that corrupt<br /> touch frames are discarded instead of reporting partial contact state.<br /> <br /> The V821 Avaota F1 board configures the vendor driver with one touch<br /> slot, so finger ID 1 is already invalid on that device.