CVE-2026-46232

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the HID playstation module where the dualshock4 parse report() function fails to validate the number of touch reports provided by a device. If a device reports an excessive number of touch reports, the loop can read beyond the boundaries of the touch reports array, potentially accessing up to 2 KiB of out-of-bounds memory. This data is then emitted via evdev if the DS4 TOUCH POINT INACTIVE bit is set.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.