SUSE CVE-2026-64364

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix out-of-bounds bit access on mtioflags mtioflags is a single unsigned long, but mtprocessslot, mtreleasependingpalms and mtreleasecontacts use it as a per-slot bitmap indexed by the slot number. That slot numb...

CVE-2026-64364

The CVE-2026-64364 entry describes a Linux kernel multitouch flaw where mt_io_flags is treated as a per-slot bitmap indexed by slot number, but the slot index can be as large as td->maxcontacts (up to 255) and not bounded by BITS_PER_LONG. This can cause set_bit/clear_bit to access beyond mt_i...

CVE-2026-64364 HID: multitouch: fix out-of-bounds bit access on mt_io_flags

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix out-of-bounds bit access on mtioflags mtioflags is a single unsigned long, but mtprocessslot, mtreleasependingpalms and mtreleasecontacts use it as a per-slot bitmap indexed by the slot number. That slot numb...

EUVD-2026-48908

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix out-of-bounds bit access on mtioflags mtioflags is a single unsigned long, but mtprocessslot, mtreleasependingpalms and mtreleasecontacts use it as a per-slot bitmap indexed by the slot number. That slot numb...

CVE-2026-64364 HID: multitouch: fix out-of-bounds bit access on mt_io_flags

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix out-of-bounds bit access on mtioflags mtioflags is a single unsigned long, but mtprocessslot, mtreleasependingpalms and mtreleasecontacts use it as a per-slot bitmap indexed by the slot number. That slot numb...

PT-2026-64585

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds bit access exists in the HID multitouch subsystem. The mt io flags variable is treated as a per-slot bitmap indexed by a slot number that can be as high as 255, based on...