HomeDefectsLIN1022-25149
Acknowledged

LIN1022-25149 : Security Advisory - linux - CVE-2026-43047

Created: May 12, 2026    Updated: May 14, 2026
Found In Version: 10.22.33.2
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  HID: multitouch: Check to ensure report responses match the request  It is possible for a malicious (or clumsy) device to respond to a specific report's feature request using a completely different report ID.  This can cause confusion in the HID core resulting in nasty side-effects such as OOB writes.  Add a check to ensure that the report ID in the response, matches the one that was requested.  If it doesn't, omit reporting the raw event and return early.