CVE-2026-64367

CVE-2026-64367 : Linux kernel HID GOODIX SPI driver (hid-goodix-spi) vulnerability where goodix_hid_set_raw_report() copies payload into a 128-byte stack buffer without proper bounds checking. The header is ~11–12 bytes, and the HID core caps at HID_MAX_BUFFER_SIZE (16384) by default, but the dri...