CVE-2026-64237

In CVE-2026-64237, the Linux kernel vulnerability concerns elan_i2c firmware handling. The issue arises when the firmware file size is not verified to contain the expected number of pages and the signature at the blob end, risking out-of-bounds reads when accessing firmware data. Affected compone...

EUVD-2026-48646

In the Linux kernel, the following vulnerability has been resolved: Input: elani2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature which resides at the end of the firmware blob before accessing them to...