CVE-2026-46232
published 2026-05-28CVE-2026-46232: In the Linux kernel, the following vulnerability has been resolved: HID: playstation: Clamp num_touch_reports A device would never lie about the number of…
PriorityP340high8.1CVSS 3.1
AVAACLPRNUINSUCHINAH
EPSS
0.26%
17.2th percentile
In the Linux kernel, the following vulnerability has been resolved:
HID: playstation: Clamp num_touch_reports
A device would never lie about the number of touch reports would it?
If it does the loop in dualshock4_parse_report will read off the end of
the touch_reports array, up to about 2 KiB for the maximum number of 256
loop iteraions. The data that is read is emitted via evdev if the
DS4_TOUCH_POINT_INACTIVE bit happens to be set. Protect against this by
clamping the num_touch_reports value provided by the device to the
maximum size of the touch_reports array.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| linux | linux | — | — |
| linux | linux | >= 752038248808a7ff176bbdb668f19ae7d2a9816b < 0bc4cf1a6ba00fb8c074531b179bc7b97502fbc4 | 0bc4cf1a6ba00fb8c074531b179bc7b97502fbc4 |
| linux | linux | >= 752038248808a7ff176bbdb668f19ae7d2a9816b < 9c031b24aed6733b6dcc5d98527875b8654a04e9 | 9c031b24aed6733b6dcc5d98527875b8654a04e9 |
| linux | linux | >= 752038248808a7ff176bbdb668f19ae7d2a9816b < 7812694752a5f295eaa05a093b90a2c332666051 | 7812694752a5f295eaa05a093b90a2c332666051 |
| linux | linux | >= 752038248808a7ff176bbdb668f19ae7d2a9816b < 208f6d5b1dfd6399bc6af9e11f27f1f496243ed0 | 208f6d5b1dfd6399bc6af9e11f27f1f496243ed0 |
| linux | linux | >= 752038248808a7ff176bbdb668f19ae7d2a9816b < cac61b58a3b6340c52afa06bb15eac033158db2f | cac61b58a3b6340c52afa06bb15eac033158db2f |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 6.13 < 6.18.32 | 6.18.32 |
| linux | linux_kernel | >= 6.19 < 7.0.9 | 7.0.9 |
| linux | linux_kernel | >= 6.2 < 6.6.140 | 6.6.140 |
| linux | linux_kernel | >= 6.7 < 6.12.90 | 6.12.90 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6gfw-vfv3-ggqr: In the Linux kernel, the following vulnerability has been resolved:
HID: playstation: Clamp num_touch_reports
A device would never lie about the num
ghsa_unreviewed·2026-05-28
CVE-2026-46232 GHSA-6gfw-vfv3-ggqr: In the Linux kernel, the following vulnerability has been resolved:
HID: playstation: Clamp num_touch_reports
A device would never lie about the num
In the Linux kernel, the following vulnerability has been resolved:
HID: playstation: Clamp num_touch_reports
A device would never lie about the number of touch reports would it?
If it does the loop in dualshock4_parse_report will read off the end of
the touch_reports array, up to about 2 KiB for the maximum number of 256
loop iteraions. The data that is read is emitted via evdev if the
DS4_TOUCH_POINT_INACTIVE bit happens to be set. Protect against this by
clamping the num_touch_reports value provided by the device to the
maximum size of the touch_reports array.
Red Hat
kernel: HID: playstation: Clamp num_touch_reports
vendor_redhat·2026-05-28
CVE-2026-46232 CWE-805 kernel: HID: playstation: Clamp num_touch_reports
kernel: HID: playstation: Clamp num_touch_reports
A flaw was found in the Linux kernel's Human Interface Device (HID) PlayStation driver. A malicious device could provide an excessively large number of touch reports, leading to an out-of-bounds read in the `dualshock4_parse_report` function. This could allow an attacker to read up to 2 KiB of kernel memory, potentially leading to information disclosure.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (R
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/0bc4cf1a6ba00fb8c074531b179bc7b97502fbc4https://git.kernel.org/stable/c/208f6d5b1dfd6399bc6af9e11f27f1f496243ed0https://git.kernel.org/stable/c/7812694752a5f295eaa05a093b90a2c332666051https://git.kernel.org/stable/c/9c031b24aed6733b6dcc5d98527875b8654a04e9https://git.kernel.org/stable/c/cac61b58a3b6340c52afa06bb15eac033158db2f
2026-05-28
Published