What is the CVSS score of CVE-2026-64237?

CVE-2026-64237 has a contested CVSS base score of 7.1 from a third party (e.g. CISA-ADP), while the vendor rates it High. vuln.today uses the vendor rating as authoritative.

Which versions of Linux Kernel are affected by CVE-2026-64237?

CVE-2026-64237 is a kernel memory disclosure vulnerability in the Elan I2C touchpad driver affecting Linux systems running kernel versions 5.10.x through 7.x.. A patch is available.

How to fix or mitigate CVE-2026-64237?

Within 24 hours, inventory systems running Linux kernels 5.10.x through 7.x with Elan I2C touchpad hardware to identify organizational exposure. Within 7 days, obtain the appropriate vendor-released patch for each affected kernel branch and conduct testing on representative hardware to validate touchpad functionality post-patching. Within 30 days, deploy kernel updates containing the elan_i2c driver fix to all affected systems and verify successful patch application across the inventory.

Linux Kernel CVE-2026-64237

EUVD-2026-48646 HIGH

Out-of-bounds Read (CWE-125)

2026-07-24 Linux

GHSA-89gj-r2fq-qc5h

Buffer Overflow Information Disclosure Linux Red Hat Suse

High

Disputed · 7.1 NVD

Severity by source

Sources disagree (Low–High)

NVD PRIMARY

7.1 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

vuln.today AI

7.1 HIGH

Local driver interaction requires low-privilege account (PR:L, AV:L); out-of-bounds read enables kernel memory disclosure (C:H) and potential crash (A:H) with no integrity impact.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N

SUSE

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Red Hat

5.5 LOW

qualitative

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 12, 2026 - 21:16 vuln.today

CVSS changed

Aug 12, 2026 - 19:07 NVD

7.1 (HIGH)

Patch available

Jul 24, 2026 - 17:48 EUVD

CVE Published

Jul 24, 2026 - 15:27 nvd

HIGH 7.1

CVE Published

Jul 24, 2026 - 15:27 cve.org

UNKNOWN (no severity yet)

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

Input: elan_i2c - validate firmware size before use

Ensure that the firmware file is large enough to contain the expected number of pages and the signature (which resides at the end of the firmware blob) before accessing them to prevent potential out-of-bounds reads.

AnalysisAI

Out-of-bounds read in the Linux kernel elan_i2c touchpad driver allows a local authenticated user to leak kernel memory or crash the system by supplying a malformed firmware blob. The driver fails to validate that the firmware file is large enough to contain the expected number of pages plus the trailing signature before accessing them, affecting all stable kernel branches from 5.10.x through 7.x prior to their respective fix versions. No active exploitation is confirmed (not in CISA KEV), and EPSS is very low at 0.17% (6th percentile), indicating this is a local hardware-driver concern rather than an imminent widespread threat.

Technical ContextAI

The elan_i2c kernel driver handles firmware updates for Elan Semiconductor touchpad devices connected via the I2C bus, commonly found in consumer and business laptops. The CWE-125 (Out-of-bounds Read) root cause lies in firmware loading logic: the driver reads sequential firmware pages and accesses a signature located at the tail of the firmware blob without first asserting that the blob is sufficiently large to contain both the full page set and that terminal signature. When a firmware file shorter than expected is processed, the driver's pointer arithmetic walks past the end of the allocated firmware buffer, reading uninitialized or adjacent kernel memory. The CPE cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:* confirms broad kernel version scope; the actual exposure is limited to systems where Elan I2C touchpad hardware is present and the elan_i2c module is loaded. The EUVD data traces the introduced commit to 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, indicating the vulnerable code has existed across many years of kernel history.

RemediationAI

Apply a patched kernel version appropriate to the deployed stable branch: 5.10.259, 5.15.210, 6.1.176, 6.6.143, 6.12.93, 6.18.35, 7.0.12, or 7.1 (post-fix). Ubuntu users should apply USN-8618-1 via standard package management (https://ubuntu.com/security/notices/USN-8618-1). Upstream stable fix commits are available at kernel.org for each branch, including https://git.kernel.org/stable/c/47b52b98edfe34d0249e72f815215ef24311c3a3 and https://git.kernel.org/stable/c/bf769358419e00344c1b16fa034d058f563d46a1 among others listed in the references. As a compensating control on systems that cannot be immediately patched, block unprivileged users from writing to firmware directories (typically under /lib/firmware/), restrict module loading to root via sysctl kernel.modules_disabled, or blacklist the elan_i2c module on servers and VMs where Elan touchpad hardware is absent - note that blacklisting will disable Elan touchpad functionality on affected laptops.

Same weakness CWE-125 – Out-of-bounds Read

View all

CVE-2014-0160 HIGH POC

7.5

CVE-2016-5198 HIGH POC

8.8

CVE-2025-5777 CRITICAL POC

9.3

CVE-2016-1646 HIGH POC

8.8

CVE-2017-5030 HIGH POC

8.8

CVE-2016-4523 HIGH

7.5

CVE-2024-48456 HIGH POC

7.5

CVE-2024-48457 HIGH POC

7.5

Same technique Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2020-0796 CRITICAL POC

10.0

CVE-2019-11043 CRITICAL POC

9.8

CVE-2009-0927 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0	Not-Affected

CVE-2026-64237 vulnerability details – vuln.today

Back

Linux Kernel CVE-2026-64237

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

Same weakness CWE-125 – Out-of-bounds Read

Same technique Buffer Overflow

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code