CVE-2026-64237
CVSS 7.1 · YüksekNVD: Analyzed
Açıklama (NVD)
In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature (which resides at the end of the firmware blob) before accessing them to prevent potential out-of-bounds reads.
Yayın: 24.07.2026 · Son değişiklik: 06.11.2026 · Zayıflık: CWE-125
CVSS 3.1 metrikleri
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
| Saldırı vektörü | Yerel |
| Karmaşıklık | Düşük |
| Gereken yetki | Düşük |
| Kullanıcı etkileşimi | Gerekmez |
| Kapsam | Değişmez |
| Gizlilik | Yüksek |
| Bütünlük | Yok |
| Erişilebilirlik | Yüksek |
Hesaplanan temel puan: 7.1. CVSS hesaplayıcıda incele
Referanslar
- https://git.kernel.org/stable/c/331d49b4e1c9efe4479bbd22922dfcdd8c64be7b
- https://git.kernel.org/stable/c/3b37190ad3ded3a15fb1dbfc4f26df520a3e59bb
- https://git.kernel.org/stable/c/47b52b98edfe34d0249e72f815215ef24311c3a3
- https://git.kernel.org/stable/c/48b0aa9c08a3ac8e0c0345b7ca581f552324e460
- https://git.kernel.org/stable/c/76b0d0baa9ae9c60e726bbe1b6ff0bec2c993634
- https://git.kernel.org/stable/c/bf769358419e00344c1b16fa034d058f563d46a1
- https://git.kernel.org/stable/c/c2c3b33b3c0bf2c9427c0926817ef5ffac50de6f
- https://git.kernel.org/stable/c/d97baee9590edf303b3eca432e61de9320834fe1