P4Verified

CVE-2026-64014: linux kernel from 2.6.34 (inclusive), before 5.10.259 (exclusive), from 5.11 (inclusive), before 5.15.210 (exclusive)…

CVE-2026-64014. CVSS 3.1 base score 7.1 (HIGH, NVD). EPSS 0.0022 (percentile 0.1147), scored 12-Oct-2026.

Affected technology

linux kernel · from 2.6.34 (inclusive), before 5.10.259 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.93 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.35 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.12 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

linux kernel · 7.1 · update rc5
linux

Linux · 5197424cdcccd2b0b1922babb93969b2515c43ce to before 45c829e5eb3b974282bae50b7cca2cc891f74f0b, 5197424cdcccd2b0b1922babb93969b2515c43ce to before e7cdcb266ba06d8480809b78ab8bb2bf8ff51ccb, 5197424cdcccd2b0b1922babb93969b2515c43ce to before 95f47331dfde243f93e679ce70bd0c24b37c683d, 5197424cdcccd2b0b1922babb93969b2515c43ce to before d883312061ccde8c536595998aaf687ec070077c, 5197424cdcccd2b0b1922babb93969b2515c43ce to before 103d2de9f505f56da173e43f12dba62f92620278, 5197424cdcccd2b0b1922babb93969b2515c43ce to before 0ca809ea8e0355299266c46e5f1755040aa8dcf3, 5197424cdcccd2b0b1922babb93969b2515c43ce to before 7585b6aa55d8ac85ad22f522e1059f93507727b6, 5197424cdcccd2b0b1922babb93969b2515c43ce to before 2905281cbda52ec9df540113b35b835feb5fafd3
Linux

Linux · 2.6.34
Linux

Component: Not specified by the source
File: drivers/input/touchscreen/usbtouchscreen.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 13-Oct-2026 14:58 UTC

CWE: CWE-125
CCR priority: 28.5 /100 (P4)
CVSS 3.1: 7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · NVD
EPSS: 0.0022 · percentile 0.1147 · 2026-10-12
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-13 16:07:08.474774+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-13 14:58:43.463475+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-64014.html