CVE-2026-46097

Input: edt-ft5x06 - fix use-after-free in debugfs teardown

published May 27, 2026

CVSS
—
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

Input: edt-ft5x06 - fix use-after-free in debugfs teardown

The commit 68743c500c6e ("Input: edt-ft5x06 - use per-client debugfs

directory") removed the manual debugfs teardown, relying on the I2C core

to handle it. However, this creates a window where debugfs files are

still accessible after edt_ft5x06_ts_teardown_debugfs() frees

tsdata->raw_buffer.

To prevent a use-after-free, protect the freeing of raw_buffer with the

device mutex and set raw_buffer to NULL. The debugfs read function

already checks if raw_buffer is NULL under the same mutex, so this

safely avoids the use-after-free.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00168 · 5.9th percentile
Published
2026-05-27T12:58Z
EPSS history
Timeline
  • 27 MAY 12:58Z
    Input: edt-ft5x06 - fix use-after-free in debugfs teardown
    cvelistv5