CVE-2026-64272

Input: mms114 - fix touch indexing for MMS134S and MMS136

HIGH
7.8
CVSS Score
Published: July 25, 2026 at 08:49 AM UTC
Updated: October 24, 2026 at 01:10 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.8
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch indexing for MMS134S and MMS136 The MMS134S and MMS136 touch controllers have an event size of 6 bytes rather than 8 bytes. When __mms114_read_reg() reads the touch data packet from the device into the touch buffer, the events are packed tightly at 6-byte intervals. However, the driver iterates through the events using standard C array indexing (touch[index]), where each element is sizeof(struct mms114_touch) (8 bytes) apart. As a result, any touch events beyond the first one are read from incorrect offsets and parsed improperly. Fix this by explicitly calculating the byte offset for each touch event based on the device's specific event size.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.13 ≤ v < 6.6.1456.13 ≤ v < 6.18.396.19 ≤ v < 7.1.46.7 ≤ v < 6.12.965.1353fefdd1d3a3403d8c44e28898d1031d8763b913
Vendor states this is fixed in 062bbe55a1f6d77b89d07135ba3b09f97bfac1cb (fixed)
Vendor states this is fixed in 112666835071d935fef764aab590339e97216d4a (fixed)
Vendor states this is fixed in 38de2979d90d8cd94f18e0567be4c8342d0e0410 (fixed)
Vendor states this is fixed in 75b12874b4172533b9efc349db328cb1a59c3981 (fixed)
Vendor states this is fixed in 7c00a0787af7164438bdbc97fcae9733cfc58d21 (fixed)
Vendor states this is fixed in a6ac4e24c1a8a533bb61035184fdcc7eede4cc8d (fixed)
Vendor states this is fixed in a747c4eb02656afdbd92eea83b88e92715a23977 (fixed)
Vendor states this is fixed in 5.13 (unaffected)
Vendor states this is fixed in 5.15.217 (unaffected)
Vendor states this is fixed in 6.1.184 (unaffected)
Vendor states this is fixed in 6.12.96 (unaffected)
Vendor states this is fixed in 6.18.39 (unaffected)
Vendor states this is fixed in 6.6.145 (unaffected)
Vendor states this is fixed in 7.1.4 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-129

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card