CVE-2026-46232
- Source
- https://cve.org/CVERecord?id=CVE-2026-46232
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46232.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-46232
- Downstream
- Related
- Published
- 2026-05-28T09:40:54.248Z
- Modified
- 2026-07-08T08:02:18.238802485Z
- Severity
-
- 8.1 (High) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
- Summary
- HID: playstation: Clamp num_touch_reports
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
HID: playstation: Clamp numtouchreports
A device would never lie about the number of touch reports would it?
If it does the loop in dualshock4parsereport will read off the end of the touchreports array, up to about 2 KiB for the maximum number of 256 loop iteraions. The data that is read is emitted via evdev if the DS4TOUCHPOINTINACTIVE bit happens to be set. Protect against this by clamping the numtouchreports value provided by the device to the maximum size of the touch_reports array.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46232.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/0bc4cf1a6ba00fb8c074531b179bc7b97502fbc4
- https://git.kernel.org/stable/c/208f6d5b1dfd6399bc6af9e11f27f1f496243ed0
- https://git.kernel.org/stable/c/7812694752a5f295eaa05a093b90a2c332666051
- https://git.kernel.org/stable/c/9c031b24aed6733b6dcc5d98527875b8654a04e9
- https://git.kernel.org/stable/c/cac61b58a3b6340c52afa06bb15eac033158db2f
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46232.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-46232
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced752038248808a7ff176bbdb668f19ae7d2a9816bFixed0bc4cf1a6ba00fb8c074531b179bc7b97502fbc4Fixed9c031b24aed6733b6dcc5d98527875b8654a04e9Fixed7812694752a5f295eaa05a093b90a2c332666051Fixed208f6d5b1dfd6399bc6af9e11f27f1f496243ed0Fixedcac61b58a3b6340c52afa06bb15eac033158db2f