CVE-2026-64367

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A stack buffer overflow exists in the hid-goodix-spi driver. The function goodix hid set raw report() utilizes a 128-byte stack buffer tmp buf to build a protocol frame, consisting of an 11-12 byte header and caller-supplied report data. Because the driver fails to set hid ll driver.max buffer size and lacks bounds checking during the memcpy() operation, a hidraw SET REPORT ioctl with a report exceeding approximately 116 bytes can overflow the buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.