UnratedFix available
Input: elan_i2c - validate firmware size before use
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature (which resides at the end of the firmware blob) before accessing them to prevent potential out-of-bounds reads.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.10.259, 5.15.210, 6.1.176, 6.12.93, 6.18.35, 6.6.143, 7.0.12
- CVEs
- CVE-2026-64237
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 3 Nov 2026, 06:31 UTC · Revision 1
Source evidence
Input: elan_i2c - validate firmware size before use
core-osv · Original sourcePublished 24 Jul 2026, 15:27 UTC
In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature (which resides at the end of the firmware blob) before accessing them to prevent potential out-of-bounds reads.
osv:CVE-2026-64237
Kernel
Fixed versions: 5.10.259, 5.15.210, 6.1.176, 6.6.143, 6.12.93, 6.18.35, 7.0.12
Complete source record
{
"id": "4ffa11f965e81ad4f2cfec70091ffe9086e3bf421d7f5c83e522e6005dd9efcc",
"url": "https://osv.dev/vulnerability/CVE-2026-64237",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Input: elan_i2c - validate firmware size before use",
"summary": "In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature (which resides at the end of the firmware blob) before accessing them to prevent potential out-of-bounds reads.",
"evidence": "osv:CVE-2026-64237",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.10.259",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.210",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.176",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.143",
"evidence": "/affected/1/ranges"
},
{
"value": "6.12.93",
"evidence": "/affected/1/ranges"
},
{
"value": "6.18.35",
"evidence": "/affected/1/ranges"
},
{
"value": "7.0.12",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2026-64237",
"aliases": [
"CVE-2026-64237"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "bb03bf3f8427a38112819061fc8688999ba02f67"
},
{
"fixed": "47b52b98edfe34d0249e72f815215ef24311c3a3"
},
{
"fixed": "c2c3b33b3c0bf2c9427c0926817ef5ffac50de6f"
},
{
"fixed": "331d49b4e1c9efe4479bbd22922dfcdd8c64be7b"
},
{
"fixed": "48b0aa9c08a3ac8e0c0345b7ca581f552324e460"
},
{
"fixed": "3b37190ad3ded3a15fb1dbfc4f26df520a3e59bb"
},
{
"fixed": "bf769358419e00344c1b16fa034d058f563d46a1"
},
{
"fixed": "d97baee9590edf303b3eca432e61de9320834fe1"
},
{
"fixed": "76b0d0baa9ae9c60e726bbe1b6ff0bec2c993634"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64237.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.0.0"
},
{
"fixed": "5.10.259"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.210"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.176"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.143"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.12.93"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.13.0"
},
{
"fixed": "6.18.35"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.19.0"
},
{
"fixed": "7.0.12"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64237.json"
}
}
],
"modified": "2026-10-28T02:30:26.446045571Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/331d49b4e1c9efe4479bbd22922dfcdd8c64be7b",
"https://git.kernel.org/stable/c/3b37190ad3ded3a15fb1dbfc4f26df520a3e59bb",
"https://git.kernel.org/stable/c/47b52b98edfe34d0249e72f815215ef24311c3a3",
"https://git.kernel.org/stable/c/48b0aa9c08a3ac8e0c0345b7ca581f552324e460",
"https://git.kernel.org/stable/c/76b0d0baa9ae9c60e726bbe1b6ff0bec2c993634",
"https://git.kernel.org/stable/c/bf769358419e00344c1b16fa034d058f563d46a1",
"https://git.kernel.org/stable/c/c2c3b33b3c0bf2c9427c0926817ef5ffac50de6f",
"https://git.kernel.org/stable/c/d97baee9590edf303b3eca432e61de9320834fe1",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64237.json",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64237",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64237.json"
}
},
"related_cves": [
{
"value": "CVE-2026-64237",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 493071,
"published_at": "2026-07-24T15:27:41.937+00:00"
}