SB20260727309 - Division by zero in Linux kernel input mouse driver
Published: July 27, 2026
Security Bulletin ID
SB20260727309
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Division by zero (CVE-ID: CVE-2026-64275)
CWE-ID: CWE-369 - Divide By Zero
CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local attacker to cause a denial of service.
The vulnerability exists due to division by zero in the elan_i2c touchpad driver when processing invalid device firmware or device tree parameters during device probe. A local attacker can provide zero trace-count values to trigger a kernel panic.
The issue occurs during device probe.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/01e0317c256c560d8dcce2e9825eb6142ee34611
- https://git.kernel.org/stable/c/2f281ff0163a38fdc4cb4061f0c241e643283a5e
- https://git.kernel.org/stable/c/59d4cc5e7a9785e4bdc9c55273274c6b49d4b58d
- https://git.kernel.org/stable/c/6bac57d8fe2a077b8a85b4140eeb7999078158eb
- https://git.kernel.org/stable/c/8c1db3418a419e788691746b9c47f863c2fd4890
- https://git.kernel.org/stable/c/df2b818fa009c10ff6ba875a1663ff001cda9558
- https://git.kernel.org/stable/c/f6d10af2036d1d4a847a74fe47ebbf93bce3c84c
- https://git.kernel.org/stable/c/feb4866a42ec94764c7eb58012256f6f37664727