CVE-2026-64274

The CVE-2026-64274 issue is in the Linux kernel Goodix touchscreen driver. The code reads device-reported touch counts without clamping, allowing a malfunctioning/malicious controller (or I2C bus tampering) to advertise up to 15 contacts. This enables a stack out-of-bounds write in goodix_ts_read...