CVE-2026-64014 Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size

🗓️ 19 Jul 2026 14:56:27Reported by LinuxType

Linux kernel usbtouchscreen Nexio data_len and x_len are clamped to URB buffer size, preventing out-of-bounds reads.

Reporter	Title	Published	Views	Family All 21
CVE	CVE-2026-64014	19 Jul 202614:56	–	cve
Debian CVE	CVE-2026-64014	19 Jul 202614:56	–	debiancve
EUVD	EUVD-2026-45587	19 Jul 202614:56	–	euvd
NVD	CVE-2026-64014	19 Jul 202616:17	–	nvd
OSV	BELL-CVE-2026-64014	22 Jul 202606:04	–	osv
OSV	DEBIAN-CVE-2026-64014	19 Jul 202616:17	–	osv
OSV	ROOT-OS-UBUNTU-2204-CVE-2026-64014 CVE-2026-64014 in linux - Patched by Root	6 Aug 202607:51	–	osv
OSV	UBUNTU-CVE-2026-64014	20 Jul 202600:00	–	osv
OSV	USN-8593-1 linux-ibm, linux-oracle vulnerabilities	23 Jul 202607:35	–	osv
OSV	USN-8603-1 linux-azure, linux-azure-fde vulnerabilities	24 Jul 202609:51	–	osv

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/input/touchscreen/usbtouchscreen.c"
    ],
    "versions": [
      {
        "version": "5197424cdcccd2b0b1922babb93969b2515c43ce",
        "lessThan": "45c829e5eb3b974282bae50b7cca2cc891f74f0b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "5197424cdcccd2b0b1922babb93969b2515c43ce",
        "lessThan": "e7cdcb266ba06d8480809b78ab8bb2bf8ff51ccb",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "5197424cdcccd2b0b1922babb93969b2515c43ce",
        "lessThan": "95f47331dfde243f93e679ce70bd0c24b37c683d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "5197424cdcccd2b0b1922babb93969b2515c43ce",
        "lessThan": "d883312061ccde8c536595998aaf687ec070077c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "5197424cdcccd2b0b1922babb93969b2515c43ce",
        "lessThan": "103d2de9f505f56da173e43f12dba62f92620278",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "5197424cdcccd2b0b1922babb93969b2515c43ce",
        "lessThan": "0ca809ea8e0355299266c46e5f1755040aa8dcf3",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "5197424cdcccd2b0b1922babb93969b2515c43ce",
        "lessThan": "7585b6aa55d8ac85ad22f522e1059f93507727b6",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "5197424cdcccd2b0b1922babb93969b2515c43ce",
        "lessThan": "2905281cbda52ec9df540113b35b835feb5fafd3",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/input/touchscreen/usbtouchscreen.c"
    ],
    "versions": [
      {
        "version": "2.6.34",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "2.6.34",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.259",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.210",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.176",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.143",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.93",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.35",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.12",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/2905281cbda52ec9df540113b35b835feb5fafd3
git	www.git.kernel.org/stable/c/e7cdcb266ba06d8480809b78ab8bb2bf8ff51ccb
git	www.git.kernel.org/stable/c/95f47331dfde243f93e679ce70bd0c24b37c683d
git	www.git.kernel.org/stable/c/d883312061ccde8c536595998aaf687ec070077c
git	www.git.kernel.org/stable/c/7585b6aa55d8ac85ad22f522e1059f93507727b6
git	www.git.kernel.org/stable/c/45c829e5eb3b974282bae50b7cca2cc891f74f0b
git	www.git.kernel.org/stable/c/0ca809ea8e0355299266c46e5f1755040aa8dcf3
git	www.git.kernel.org/stable/c/103d2de9f505f56da173e43f12dba62f92620278

19 Jul 2026 14:56Current

EPSS0.00177