CVE-2026-80566

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw in the hynitron cstxxx driver allows for the corruption of the touch state of previously active slots. This occurs because the driver fails to properly validate the touch count and finger IDs read from the controller report. Specifically, a finger ID equal to max touch num can reach the cst3xx report contact() function, and touch counts exceeding the supported number of touch slots can be used to index a fixed-size report buffer without range checking.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.