InfoSec Signals™
Sign InStart Free
Back to CVE records
Not yet scoredPublished Oct 6, 2026

CVE-2026-98206Input: cyttsp5 - clamp the HID report size before memcpy

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

In the Linux kernel, the following vulnerability has been resolved: Input: cyttsp5 - clamp the HID report size before memcpy The size field comes from the device and is used as the memcpy() length into response_buf, which is CY_MAX_INPUT bytes.

CVSS
Not yet scored
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Received
Record last updated
Oct 19, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from 5b0c03e24a061f9c9e8b28fa157b80990c559a37 before b172c69e67bc71f71f6e3d8b3258b3dec29e42c6; from 5b0c03e24a061f9c9e8b28fa157b80990c559a37 before d41a80d852f2948c6d388c520e76c0a72897f003; from 5b0c03e24a061f9c9e8b28fa157b80990c559a37 before 9eb261092d4c967679fa351b7190c6d9082b07c5; from 5b0c03e24a061f9c9e8b28fa157b80990c559a37 before 495955feb57750de4a641da13d7e51fb4d0a9764; from 5b0c03e24a061f9c9e8b28fa157b80990c559a37 before 85f080fb87ed5cd3e46121be677f52c82f26a0ab
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.