Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to prevent stack buffer overflow… (CVE-2026-64367)
A stack buffer overflow vulnerability in the Linux kernel's hid-goodix-spi driver was resolved. The vulnerability occurs because the driver does not properly validate the size of HID reports before copying them into a fixed-size stack buffer, allowing a local attacker to overflow the buffer via a specially crafted hidraw SET_REPORT ioctl. This flaw was fixed by adding a size check to reject reports exceeding the buffer capacity. The issue affects certain versions of the linux-hwe-edge kernel prior to 7.0.0-31.31 and related versions. A patch is available from the vendor.
AI Analysis
Technical Summary
The Linux kernel hid-goodix-spi driver builds a protocol frame in a 128-byte stack buffer, writing a header followed by caller-supplied report data. The HID core caps report size at 16384 bytes, but the driver does not set a maximum buffer size or perform bounds checking before copying the payload, leading to a stack buffer overflow when a report larger than approximately 116 bytes is passed via hidraw SET_REPORT ioctl. The vulnerability was fixed by adding a size check after header construction to reject oversized reports. This vulnerability is tracked as CVE-2026-64367 and affects linux-hwe-edge kernel versions prior to 7.0.0-31.31 and related builds.
Potential Impact
A local attacker with the ability to issue hidraw SET_REPORT ioctl calls can exploit this vulnerability to overflow a stack buffer in the kernel, potentially leading to arbitrary code execution, privilege escalation, or system compromise. The CVSS score is 7.8 (high severity) with impact on confidentiality, integrity, and availability.
Mitigation Recommendations
A vendor-provided patch is available and should be applied to affected systems. The vulnerability is fixed in linux-hwe-edge kernel versions 7.0.0-31.31 and later. After applying the update, a system reboot is required. Due to an ABI change, third-party kernel modules must be recompiled and reinstalled. Follow the vendor advisory instructions for updating to the fixed package versions.
Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to prevent stack buffer overflow… (CVE-2026-64367)
Description
A stack buffer overflow vulnerability in the Linux kernel's hid-goodix-spi driver was resolved. The vulnerability occurs because the driver does not properly validate the size of HID reports before copying them into a fixed-size stack buffer, allowing a local attacker to overflow the buffer via a specially crafted hidraw SET_REPORT ioctl. This flaw was fixed by adding a size check to reject reports exceeding the buffer capacity. The issue affects certain versions of the linux-hwe-edge kernel prior to 7.0.0-31.31 and related versions. A patch is available from the vendor.
CVSS v3.1
Score 7.8high
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel hid-goodix-spi driver builds a protocol frame in a 128-byte stack buffer, writing a header followed by caller-supplied report data. The HID core caps report size at 16384 bytes, but the driver does not set a maximum buffer size or perform bounds checking before copying the payload, leading to a stack buffer overflow when a report larger than approximately 116 bytes is passed via hidraw SET_REPORT ioctl. The vulnerability was fixed by adding a size check after header construction to reject oversized reports. This vulnerability is tracked as CVE-2026-64367 and affects linux-hwe-edge kernel versions prior to 7.0.0-31.31 and related builds.
Potential Impact
A local attacker with the ability to issue hidraw SET_REPORT ioctl calls can exploit this vulnerability to overflow a stack buffer in the kernel, potentially leading to arbitrary code execution, privilege escalation, or system compromise. The CVSS score is 7.8 (high severity) with impact on confidentiality, integrity, and availability.
Mitigation Recommendations
A vendor-provided patch is available and should be applied to affected systems. The vulnerability is fixed in linux-hwe-edge kernel versions 7.0.0-31.31 and later. After applying the update, a system reboot is required. Due to an ABI change, third-party kernel modules must be recompiled and reinstalled. Follow the vendor advisory instructions for updating to the fixed package versions.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-p4f3-xcv2-3qcx
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64367"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a65420a9c2644c7f8084485
Added to database: 07/25/2026, 23:08:58 UTC
Last enriched: 09/07/2026, 18:05:04 UTC
Last updated: 09/08/2026, 22:52:14 UTC
Views: 48
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.