CVE-2026-64014

In the Linux kernel, the following vulnerability has been resolved: Input: usbtouchscreen - clamp NEXIO datalen/xlen to URB buffer size nexioreaddata pulls datalen and xlen from a packed be16 header in the device's interrupt packet and then walks packet-data0..xlen and packet-dataxlen..datalen...

CVE-2026-64014

The CVE-2026-64014 issue affects the Linux kernel USB touchscreen path for NEXIO devices (nexio_read_data). It describes a vulnerability where data_len and x_len are read from a 16-bit header and used to walk packet data without proper bounds, potentially enabling a ~64 KiB out-of-bounds read pas...

PT-2026-61331

In the Linux kernel, the following vulnerability has been resolved: Input: usbtouchscreen - clamp NEXIO data len/x len to URB buffer size nexio read data pulls data len and x len from a packed be16 header in the device's interrupt packet and then walks packet-data0..x len and packet-datax len..da...

Linux Distros Unpatched Vulnerability : CVE-2026-23208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: Prevent excessive number of frames In this case, the user constructed the parameters with maxpacksize 40 for rate 22050 / pps 1000, and packsiz...

EUVD-2025-203679

In the Linux kernel, the following vulnerability has been resolved: Input: pegasus-notetaker - fix potential out-of-bounds access In the pegasusnotetaker driver, the pegasusprobe function allocates the URB transfer buffer using the wMaxPacketSize value from the endpoint descriptor. An attacker ca...

CVE-2025-68217

In the Linux kernel, the following vulnerability has been resolved: Input: pegasus-notetaker - fix potential out-of-bounds access In the pegasusnotetaker driver, the pegasusprobe function allocates the URB transfer buffer using the wMaxPacketSize value from the endpoint descriptor. An attacker ca...

CVE-2025-68217

Technical details for CVE-2025-68217 are not publicly provided in the supplied connected documents. The initial description outlines an out-of-bounds risk in the pegasus_notetaker driver, but no concrete technical specifics (vendor/version, exploit, or patch) are included here. Monitor for updates.

PT-2025-51630

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The pegasus notetaker driver contains a flaw where the pegasus probe function allocates a URB transfer buffer based on a potentially manipulated wMaxPacketSize value from a USB endpoint...