CVE-2026-56936: Buffer Overflow
Published Oct 6, 2026
·Updated
In wacomhidsetdevicemode of wacomsys.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
1 affected component
Linux Linux kernel
Event History
Oct 6, 2026
CVE Published
via MITRE·06:20 PM
Data Sourced
via MITRE·06:20 PM
DescriptionWeakness
Data Sourced
via NVD·07:18 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The issue can lead to physical escalation of privilege and does not require additional execution privileges. Exploitation does not require user interaction.
2
Which deployments are identified as affected?
The affected software is identified as the Linux kernel. The provided information does not specify affected kernel versions, device models, or configurations.
3
Is there a documented workaround if patching cannot be performed immediately?
No workaround or mitigation is provided in the available information.