Linux kernel HID:ps4: Clamp num_touch_reports to prevent array over-read
CVE-2026-46232 Published on May 28, 2026
HID: playstation: Clamp num_touch_reports
In the Linux kernel, the following vulnerability has been resolved:
HID: playstation: Clamp num_touch_reports
A device would never lie about the number of touch reports would it?
If it does the loop in dualshock4_parse_report will read off the end of
the touch_reports array, up to about 2 KiB for the maximum number of 256
loop iteraions. The data that is read is emitted via evdev if the
DS4_TOUCH_POINT_INACTIVE bit happens to be set. Protect against this by
clamping the num_touch_reports value provided by the device to the
maximum size of the touch_reports array.
Products Associated with CVE-2026-46232
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 752038248808a7ff176bbdb668f19ae7d2a9816b and below 0bc4cf1a6ba00fb8c074531b179bc7b97502fbc4 is affected.
- Version 752038248808a7ff176bbdb668f19ae7d2a9816b and below 9c031b24aed6733b6dcc5d98527875b8654a04e9 is affected.
- Version 752038248808a7ff176bbdb668f19ae7d2a9816b and below 7812694752a5f295eaa05a093b90a2c332666051 is affected.
- Version 752038248808a7ff176bbdb668f19ae7d2a9816b and below 208f6d5b1dfd6399bc6af9e11f27f1f496243ed0 is affected.
- Version 752038248808a7ff176bbdb668f19ae7d2a9816b and below cac61b58a3b6340c52afa06bb15eac033158db2f is affected.
- Version 6.2 is affected.
- Before 6.2 is unaffected.
- Version 6.6.140, <= 6.6.* is unaffected.
- Version 6.12.90, <= 6.12.* is unaffected.
- Version 6.18.32, <= 6.18.* is unaffected.
- Version 7.0.9, <= 7.0.* is unaffected.
- Version 7.1-rc4, <= * is unaffected.