CVE-2026-64367

In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to prevent stack buffer overflow goodixhidsetrawreport builds a protocol frame in a 128-byte stack buffer tmpbuf, writing an 11-12 byte header followed by the caller-supplied report data...

CVE-2026-64367 HID: hid-goodix-spi: validate report size to prevent stack buffer overflow

In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to prevent stack buffer overflow goodixhidsetrawreport builds a protocol frame in a 128-byte stack buffer tmpbuf, writing an 11-12 byte header followed by the caller-supplied report data...

CVE-2026-64367

CVE-2026-64367 : Linux kernel HID GOODIX SPI driver (hid-goodix-spi) vulnerability where goodix_hid_set_raw_report() copies payload into a 128-byte stack buffer without proper bounds checking. The header is ~11–12 bytes, and the HID core caps at HID_MAX_BUFFER_SIZE (16384) by default, but the dri...