THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-64366 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert wacom_wac_queue_insert() calls kfifo_skip() in a loop when the kfifo doesn't have enough space for the incoming report. If the kfifo is empty,

[NVD] CVE-2026-64366 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert wacom_wac_queue_insert() calls kfifo_skip() in a loop when the kfifo doesn't have enough space for the incoming report. If the kfifo is empty,

lownvdPublished 2026-07-25

CVE-2026-64366 CVSS: 8.8 HIGH Published: 2026-07-25T10:17:19.403

In the Linux kernel, the following vulnerability has been resolved:

HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert

wacom_wac_queue_insert() calls kfifo_skip() in a loop when the kfifo doesn't have enough space for the incoming report. If the kfifo is empty, kfifo_skip() reads stale data left in the kmalloc'd bu

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-64366