Get real-time updates on Telegram
CVE-2026-64237: linux kernel from 4.0 (inclusive), before 5.10.259 (exclusive), from 5.11 (inclusive), before 5.15.210 (exclusive)…
CVE-2026-64237. CVSS 3.1 base score 7.1 (HIGH, NVD). EPSS 0.00117 (percentile 0.01605), scored 22-Oct-2026.
Affected technology
linux kernel · from 4.0 (inclusive), before 5.10.259 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.93 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.35 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 7.0.12 (exclusive)
linux
linux kernel · 7.1 · update rc1
linux
linux kernel · 7.1 · update rc2
linux
linux kernel · 7.1 · update rc3
linux
linux kernel · 7.1 · update rc4
linux
linux kernel · 7.1 · update rc5
linux
Linux · bb03bf3f8427a38112819061fc8688999ba02f67 to before 47b52b98edfe34d0249e72f815215ef24311c3a3, bb03bf3f8427a38112819061fc8688999ba02f67 to before c2c3b33b3c0bf2c9427c0926817ef5ffac50de6f, bb03bf3f8427a38112819061fc8688999ba02f67 to before 331d49b4e1c9efe4479bbd22922dfcdd8c64be7b, bb03bf3f8427a38112819061fc8688999ba02f67 to before 48b0aa9c08a3ac8e0c0345b7ca581f552324e460, bb03bf3f8427a38112819061fc8688999ba02f67 to before 3b37190ad3ded3a15fb1dbfc4f26df520a3e59bb, bb03bf3f8427a38112819061fc8688999ba02f67 to before bf769358419e00344c1b16fa034d058f563d46a1, bb03bf3f8427a38112819061fc8688999ba02f67 to before d97baee9590edf303b3eca432e61de9320834fe1, bb03bf3f8427a38112819061fc8688999ba02f67 to before 76b0d0baa9ae9c60e726bbe1b6ff0bec2c993634
Linux
Linux · 4.0
Linux
Component: Not specified by the source
File: drivers/input/mouse/elan_i2c_core.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-125
- CCR priority
- 28.4 /100 (P4)
- CVSS 3.1
- 7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · NVD
- EPSS
- 0.00117 · percentile 0.01607 · 2026-10-24
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-24 15:09:16.138216+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-24 15:07:27.951960+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-64237.html