{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-64237","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","state":"PUBLISHED","assignerShortName":"Linux","dateReserved":"2026-07-19T15:36:31.771Z","datePublished":"2026-07-24T15:27:41.937Z","dateUpdated":"2026-07-27T04:37:26.944Z"},"containers":{"cna":{"providerMetadata":{"orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux","dateUpdated":"2026-07-27T04:37:26.944Z"},"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nInput: elan_i2c - validate firmware size before use\n\nEnsure that the firmware file is large enough to contain the expected\nnumber of pages and the signature (which resides at the end of the\nfirmware blob) before accessing them to prevent potential out-of-bounds\nreads."}],"affected":[{"product":"Linux","vendor":"Linux","defaultStatus":"unaffected","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/input/mouse/elan_i2c_core.c"],"versions":[{"version":"bb03bf3f8427a38112819061fc8688999ba02f67","lessThan":"47b52b98edfe34d0249e72f815215ef24311c3a3","status":"affected","versionType":"git"},{"version":"bb03bf3f8427a38112819061fc8688999ba02f67","lessThan":"c2c3b33b3c0bf2c9427c0926817ef5ffac50de6f","status":"affected","versionType":"git"},{"version":"bb03bf3f8427a38112819061fc8688999ba02f67","lessThan":"331d49b4e1c9efe4479bbd22922dfcdd8c64be7b","status":"affected","versionType":"git"},{"version":"bb03bf3f8427a38112819061fc8688999ba02f67","lessThan":"48b0aa9c08a3ac8e0c0345b7ca581f552324e460","status":"affected","versionType":"git"},{"version":"bb03bf3f8427a38112819061fc8688999ba02f67","lessThan":"3b37190ad3ded3a15fb1dbfc4f26df520a3e59bb","status":"affected","versionType":"git"},{"version":"bb03bf3f8427a38112819061fc8688999ba02f67","lessThan":"bf769358419e00344c1b16fa034d058f563d46a1","status":"affected","versionType":"git"},{"version":"bb03bf3f8427a38112819061fc8688999ba02f67","lessThan":"d97baee9590edf303b3eca432e61de9320834fe1","status":"affected","versionType":"git"},{"version":"bb03bf3f8427a38112819061fc8688999ba02f67","lessThan":"76b0d0baa9ae9c60e726bbe1b6ff0bec2c993634","status":"affected","versionType":"git"}]},{"product":"Linux","vendor":"Linux","defaultStatus":"affected","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/input/mouse/elan_i2c_core.c"],"versions":[{"version":"4.0","status":"affected"},{"version":"0","lessThan":"4.0","status":"unaffected","versionType":"semver"},{"version":"5.10.259","lessThanOrEqual":"5.10.*","status":"unaffected","versionType":"semver"},{"version":"5.15.210","lessThanOrEqual":"5.15.*","status":"unaffected","versionType":"semver"},{"version":"6.1.176","lessThanOrEqual":"6.1.*","status":"unaffected","versionType":"semver"},{"version":"6.6.143","lessThanOrEqual":"6.6.*","status":"unaffected","versionType":"semver"},{"version":"6.12.93","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.35","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.0.12","lessThanOrEqual":"7.0.*","status":"unaffected","versionType":"semver"},{"version":"7.1","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"5.10.259"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"5.15.210"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"6.1.176"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"6.6.143"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"6.12.93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"6.18.35"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"7.0.12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"7.1"}]}]}],"references":[{"url":"https://git.kernel.org/stable/c/47b52b98edfe34d0249e72f815215ef24311c3a3"},{"url":"https://git.kernel.org/stable/c/c2c3b33b3c0bf2c9427c0926817ef5ffac50de6f"},{"url":"https://git.kernel.org/stable/c/331d49b4e1c9efe4479bbd22922dfcdd8c64be7b"},{"url":"https://git.kernel.org/stable/c/48b0aa9c08a3ac8e0c0345b7ca581f552324e460"},{"url":"https://git.kernel.org/stable/c/3b37190ad3ded3a15fb1dbfc4f26df520a3e59bb"},{"url":"https://git.kernel.org/stable/c/bf769358419e00344c1b16fa034d058f563d46a1"},{"url":"https://git.kernel.org/stable/c/d97baee9590edf303b3eca432e61de9320834fe1"},{"url":"https://git.kernel.org/stable/c/76b0d0baa9ae9c60e726bbe1b6ff0bec2c993634"}],"title":"Input: elan_i2c - validate firmware size before use","x_generator":{"engine":"bippy-1.2.0"}}}}