CVE-2026-63908

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A boundary check error exists in the atmel mxt ts driver within the mxt prepare cfg mem() function. When a configuration file specifies an object size larger than the driver's known mxt obj size(object), the driver fails to correctly discard the extra bytes. Because the loop uses a 0-based index, the condition i > mxt obj size(object) allows the processing of one additional byte when i equals the object size. This results in an off-by-one error where a single byte of an adjacent instance or object is overwritten during the calculation of byte offset.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.