Search/CVE-2026-64237
● CVE — High

CVE-2026-64237

VendorlinuxProductlinux kernelDiscoveredJul 24, 2026UpdatedOct 24, 2026

In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature (which resides at the end of the firmware blob) before accessing them to prevent potential out-of-bounds reads.

CVSS v3.1
7.1 HIGH
EPSS
0.12%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
10
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Intelligence Reports1
1 intelligence report available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
EPSS Trend
Sep 25, 2026 → Oct 22, 2026
▼ 0.05pp
0.17% → 0.12% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Connections
12 relationships
Timeline
disclosure → media coverage
Jul 24, 2026
Disclosure — published as a CVE record. · last revised by NVD Oct 24, 2026
Jul 28, 2026
ubuntu.com reports: USN-8618-1: Linux kernel vulnerabilities
Aug 20, 2026
ubuntu.com reports: USN-8663-1: Linux kernel (NVIDIA) vulnerabilities
Aug 20, 2026
ubuntu.com reports: USN-8664-1: Linux kernel (NVIDIA BaseOS) vulnerabilities
Sep 7, 2026
ubuntu.com reports: USN-8728-1: Linux kernel (GCP) vulnerabilities
Sep 18, 2026
ubuntu.com reports: USN-8781-1: Linux kernel (NVIDIA Tegra) vulnerabilities
Sep 22, 2026
ubuntu.com reports: USN-8728-2: Linux kernel (Azure) vulnerabilities
Sep 29, 2026
ubuntu.com reports: USN-8728-3: Linux kernel (Oracle) vulnerabilities
Oct 6, 2026
ubuntu.com reports: USN-8878-1: Linux kernel (GCP) vulnerabilities
Oct 6, 2026
ubuntu.com reports: USN-8879-1: Linux kernel (Oracle) vulnerabilities
Oct 6, 2026
ubuntu.com reports: USN-8875-1: Linux kernel vulnerabilities