CVE & CISA-KEV Catalog

CVE-2026-46232

MEDIUM
4.0
CVSS v3
NVD

Description

In the Linux kernel, the following vulnerability has been resolved: HID: playstation: Clamp num_touch_reports A device would never lie about the number of touch reports would it? If it does the loop in dualshock4_parse_report will read off the end of the touch_reports array, up to about 2 KiB for the maximum number of 256 loop iteraions. The data that is read is emitted via evdev if the DS4_TOUCH_POINT_INACTIVE bit happens to be set. Protect against this by clamping the num_touch_reports value provided by the device to the maximum size of the touch_reports array.

How to fix

Remediation Available
linuxDebian
Fixed in:6.12.90-1CVE-2026-46232
Fixed in:7.0.9-1CVE-2026-46232

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityNone
IntegrityNone
AvailabilityLow

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploit Intelligence

0.26%probability of exploitation in 30 days
17thpercentile

Low risk: more likely to be exploited than 17% of all known CVEs.

References

Embed a live status badge for CVE-2026-46232
CVE-2026-46232 severity badge

Markdown

[![CVE-2026-46232](https://tridentstack.com/cve/badge/CVE-2026-46232.svg)](https://tridentstack.com/cve/CVE-2026-46232)

HTML

<a href="https://tridentstack.com/cve/CVE-2026-46232"><img src="https://tridentstack.com/cve/badge/CVE-2026-46232.svg" alt="CVE-2026-46232"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-06-10.