CVE-2026-43047: HID: multitouch: Check to ensure report responses match the request
In the Linux kernel, the following vulnerability has been resolved:
HID: multitouch: Check to ensure report responses match the request
It is possible for a malicious (or clumsy) device to respond to a specific report's feature request using a completely different report ID. This can cause confusion in the HID core resulting in nasty side-effects such as OOB writes.
Add a check to ensure that the report ID in the response, matches the one that was requested. If it doesn't, omit reporting the raw event and return early.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
In HID multitouch handling, verify that the report ID in each response matches the requested report ID; if it does not, omit the raw event and return early.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43047?
CVE-2026-43047 is considered a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2026-43047?
To fix CVE-2026-43047, update to the latest version of the Linux kernel that includes the patch for this vulnerability.
What does CVE-2026-43047 affect?
CVE-2026-43047 affects the HID multitouch driver in the Linux kernel.
What type of vulnerability is CVE-2026-43047?
CVE-2026-43047 is a vulnerability related to improper validation of report responses in HID multitouch devices.
Can CVE-2026-43047 be exploited remotely?
Exploitation of CVE-2026-43047 requires physical access to a vulnerable HID multitouch device.