CVE-2026-98206EPSS p6.5%
CVE-2026-98206CVE-2026-98206
Description
In the Linux kernel, the following vulnerability has been resolved:
Input: cyttsp5 - clamp the HID report size before memcpy
The size field comes from the device and is used as the memcpy()
length into response_buf, which is CY_MAX_INPUT bytes.
Scoring
| EPSS | 0.18% probability of exploitation · percentile 6.5% · 2026-10-10T12:00:23Z |
| Last modified | 2026-10-06 |