Out-of-bounds write in Linux kernel - CVE-2026-63908
Published: July 20, 2026
Vulnerability identifier: #VU138744
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2026-63908
CWE-ID: CWE-787
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Linux Foundation
Affected software:
Linux kernel
Linux kernel
Detailed vulnerability description
The vulnerability allows a local user to overwrite adjacent memory.
The vulnerability exists due to an out-of-bounds write in mxt_prepare_cfg_mem in the atmel_mxt_ts driver when parsing a crafted configuration file with an object size larger than the expected object size. A local user can provide a specially crafted configuration file to overwrite adjacent memory.
The issue is caused by an incorrect boundary check on a 0-based index, which allows exactly one byte past the valid object boundary to be written.
How to mitigate CVE-2026-63908
Install security update from vendor's repository.
Sources
- https://git.kernel.org/stable/c/1017e1c6c6c49cccbcda9bbcfa49e50b0b6dad39
- https://git.kernel.org/stable/c/5c3681c3abc35cfac6b702251382312c60d96bc2
- https://git.kernel.org/stable/c/6c6b989b4ebf22b086fdfcac2163b5cb55e34d8f
- https://git.kernel.org/stable/c/7f95f4792c0dc767fcb8e405391e779ab419d55a
- https://git.kernel.org/stable/c/862a1a32b5190241fce7a7d20229539a3926f31e
- https://git.kernel.org/stable/c/ae92e334544263a02d9f99e18385e718c44392c9
- https://git.kernel.org/stable/c/baa0210fb6a9dc3882509a9411b6d284d88fe30e
- https://git.kernel.org/stable/c/e9b62996ba537774f68fecfd7eecb5aec1713952