CVE-2026-46232

HID: playstation: Clamp num_touch_reports

High · published May 28, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
33.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

HID: playstation: Clamp num_touch_reports

A device would never lie about the number of touch reports would it?

If it does the loop in dualshock4_parse_report will read off the end of

the touch_reports array, up to about 2 KiB for the maximum number of 256

loop iteraions. The data that is read is emitted via evdev if the

DS4_TOUCH_POINT_INACTIVE bit happens to be set. Protect against this by

clamping the num_touch_reports value provided by the device to the

maximum size of the touch_reports array.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00405 · 33.6th percentile
Published
2026-05-28T09:40Z
EPSS history
Timeline
  • 28 MAY 09:40Z
    HID: playstation: Clamp num_touch_reports
    cvelistv5