Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Input: usbtouchscreen – Clamps datalen/xlen to the urb buffer size. The nexioreaddata function extracts datalen and xlen from a packed be16 header in the device’s interrupt packet. It then iterates through the packet-data0..xlen...

Linux kernel Touchscreen Buffer Overflow

The vulnerability in the nexioreaddata function within the drivers/input/touchscreen/usbtouchscreen.c file of the Linux kernel touchscreen driver is related to buffer overflow. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability ...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073374)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073374 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: usbtouchscreen - clamp NEXIO datalen/xlen to URB buffer size nexioreaddata pulls datalen a...

CVE-2026-64014

A flaw was found in the Linux kernel's usbtouchscreen driver. A local attacker with a specially crafted USB touch screen device could exploit this vulnerability by sending a malicious interrupt packet with an oversized length field. This improper handling of input lengths can lead to an...

CVE-2026-64014

In the Linux kernel, the following vulnerability has been resolved: Input: usbtouchscreen - clamp NEXIO datalen/xlen to URB buffer size nexioreaddata pulls datalen and xlen from a packed be16 header in the device's interrupt packet and then walks packet-data0..xlen and packet-dataxlen..datalen...

CVE-2026-64014 Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size

In the Linux kernel, the following vulnerability has been resolved: Input: usbtouchscreen - clamp NEXIO datalen/xlen to URB buffer size nexioreaddata pulls datalen and xlen from a packed be16 header in the device's interrupt packet and then walks packet-data0..xlen and packet-dataxlen..datalen...

CVE-2026-64014

In the Linux kernel, the following vulnerability has been resolved: Input: usbtouchscreen - clamp NEXIO datalen/xlen to URB buffer size nexioreaddata pulls datalen and xlen from a packed be16 header in the device's interrupt packet and then walks packet-data0..xlen and packet-dataxlen..datalen...

CVE-2026-64014 Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size

In the Linux kernel, the following vulnerability has been resolved: Input: usbtouchscreen - clamp NEXIO datalen/xlen to URB buffer size nexioreaddata pulls datalen and xlen from a packed be16 header in the device's interrupt packet and then walks packet-data0..xlen and packet-dataxlen..datalen...

CVE-2026-64014

A vulnerability in the Linux kernel 's usbtouchscreen driver allows an out-of-bounds read due to improper clamping of the data_len and x_len fields in the NEXIO device's interrupt packet. Specifically, the nexio_read_data() function fails to adequately bound the data walk against the 1017-byte ca...

CVE-2026-64014: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Input: usbtouchscreen - clamp NEXIO datalen/xlen to URB buffer size nexioreaddata pulls datalen and xlen from a packed be16 header in the device's interrupt packet and then walks packet-data0..xlen and packet-dataxlen..datalen...

PT-2026-61331

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the nexio read data function. The function retrieves data len and x len from a packed header in the device interrupt packet and iterates through the...