What is the CVSS score of CVE-2026-64272?

CVE-2026-64272 has a contested CVSS base score of 7.8 from a third party (e.g. CISA-ADP), while the vendor rates it High. vuln.today uses the vendor rating as authoritative.

Which versions of Linux Kernel are affected by CVE-2026-64272?

CVE-2026-64272 affects the Linux kernel mms114 driver in systems equipped with MELFAS MMS134S and MMS136 touch controllers, enabling potential kernel memory disclosure or state corruption through a…. A patch is available.

How to fix or mitigate CVE-2026-64272?

Within 24 hours, audit your infrastructure to identify all systems physically equipped with MELFAS MMS134S or MMS136 touch controllers, particularly in kiosks, industrial systems, and embedded deployments. Within 7 days, obtain and apply the vendor-released patch to the Linux kernel across all affected systems; prioritize patching in environments with local user access. Within 30 days, verify patch deployment completeness through system scanning and vulnerability rescans to confirm remediation.

Linux Kernel CVE-2026-64272

EUVD-2026-48984 HIGH

Improper Validation of Array Index (CWE-129)

2026-07-25 Linux

GHSA-prw5-9985-9rc7

Information Disclosure Linux

High

Disputed · 7.8 NVD

Severity by source

Sources disagree (Low–High)

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.8 HIGH

Local access with low privileges suffices to trigger multi-touch parsing; kernel memory misalignment justifies C:H/I:H/A:H; hardware prerequisite does not alter AC under CVSS convention.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SUSE

2.4 LOW

AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 13, 2026 - 18:38 vuln.today

CVSS changed

Aug 13, 2026 - 18:37 NVD

7.8 (HIGH)

Patch available

Jul 25, 2026 - 11:18 EUVD

CVE Published

Jul 25, 2026 - 08:49 nvd

HIGH 7.8

CVE Published

Jul 25, 2026 - 08:49 cve.org

UNKNOWN (no severity yet)

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

Input: mms114 - fix touch indexing for MMS134S and MMS136

The MMS134S and MMS136 touch controllers have an event size of 6 bytes rather than 8 bytes. When __mms114_read_reg() reads the touch data packet from the device into the touch buffer, the events are packed tightly at 6-byte intervals. However, the driver iterates through the events using standard C array indexing (touch[index]), where each element is sizeof(struct mms114_touch) (8 bytes) apart. As a result, any touch events beyond the first one are read from incorrect offsets and parsed improperly.

Fix this by explicitly calculating the byte offset for each touch event based on the device's specific event size.

AnalysisAI

Touch event indexing in the Linux kernel mms114 driver misaligns reads for MMS134S and MMS136 controllers, which pack events at 6-byte intervals while the driver iterates at 8-byte struct offsets. On systems physically equipped with these MELFAS touch controllers, a locally privileged attacker can trigger multi-touch input processing that causes the driver to read kernel memory from incorrect offsets, potentially exposing sensitive data or corrupting kernel state. No public exploit or active exploitation has been identified; EPSS stands at 0.21%, reflecting negligible widespread exploitation risk at time of analysis.

Technical ContextAI

The flaw resides in drivers/input/touchscreen/mms114.c within the Linux kernel Input subsystem. MELFAS MMS134S and MMS136 are embedded touch controller ICs used in mobile and kiosk devices; their touch event packets are 6 bytes each. The driver's __mms114_read_reg() function reads the raw event buffer correctly, but the iteration loop indexes into it using standard C array syntax (touch[index]), where each element is sizeof(struct mms114_touch) = 8 bytes apart. For any touch event beyond index 0, the driver reads from an offset that is 2*(index) bytes ahead of the actual event boundary, constituting an improper array index access classified under CWE-129. The affected CPE is cpe:2.3:a:linux:linux:* for kernels incorporating commit 53fefdd1d3a3403d8c44e28898d1031d8763b913 up to the respective fix commits across stable branches.

RemediationAI

Upgrade to a patched kernel release: 6.6.145, 6.12.96, 6.18.39, or 7.1.4 as appropriate for the stable branch in use; 7.2-rc1 also contains the fix. Fix commits are available at git.kernel.org/stable/c/112666835071d935fef764aab590339e97216d4a, git.kernel.org/stable/c/a747c4eb02656afdbd92eea83b88e92715a23977, git.kernel.org/stable/c/75b12874b4172533b9efc349db328cb1a59c3981, git.kernel.org/stable/c/a6ac4e24c1a8a533bb61035184fdcc7eede4cc8d, and git.kernel.org/stable/c/7c00a0787af7164438bdbc97fcae9733cfc58d21. For systems that cannot be immediately updated, blacklisting the mms114 module (adding 'blacklist mms114' to /etc/modprobe.d/ and rebooting, or running modprobe -r mms114 at runtime) eliminates the attack surface entirely; the trade-off is complete loss of touch input for MMS134S/MMS136 devices. No other workaround preserves touch functionality while mitigating the indexing flaw.

Same weakness CWE-129 – Improper Validation of Array Index

View all

CVE-2016-9053 CRITICAL POC

9.8

CVE-2020-27485 CRITICAL POC

9.9

CVE-2020-27483 CRITICAL POC

9.9

CVE-2024-24563 CRITICAL POC

9.8

CVE-2017-8797 HIGH

7.5

CVE-2018-11489 HIGH POC

8.8

CVE-2026-56770 HIGH POC

8.7

CVE-2017-7228 HIGH POC

8.2

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Low

Product	Status
openSUSE Tumbleweed	Fixed
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected

CVE-2026-64272 vulnerability details – vuln.today

Back

Linux Kernel CVE-2026-64272

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

Same weakness CWE-129 – Improper Validation of Array Index

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code