PT-2026-36464 · Linux · Linux Kernel

Published 2026-05-01 · Updated 2026-05-22 · CVE-2026-43047

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the HID multitouch component where a device can respond to a feature request using a report ID that differs from the one requested. This discrepancy can lead to confusion within the HID core, potentially resulting in out-of-bounds (OOB) writes, which occur when data is written outside the intended memory boundary.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-43047

ECHO-2B56-A56D-EB3F

OESA-2026-2415

OESA-2026-2416

OESA-2026-2417

OESA-2026-2418

OESA-2026-2419

Affected Products

Linux Kernel

References · 174

• https://nvd.nist.gov/vuln/detail/CVE-2026-23374 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-40281 · Security Note
• https://git.kernel.org/stable/c/2edc92f89eee328b5be5706b5d431bf90669e9c0 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-37967 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-37766 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-40062 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-39756 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-39955 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-68740 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-40078 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-22994 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-40136 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-39980 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43488 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23317 · Security Note