CVE-2026-43047 (GCVE-0-2026-43047)

Vulnerability from cvelistv5 – Published: 2026-05-01 14:15 – Updated: 2026-08-05 12:25
VLAI
Title
HID: multitouch: Check to ensure report responses match the request
Summary
In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Check to ensure report responses match the request It is possible for a malicious (or clumsy) device to respond to a specific report's feature request using a completely different report ID. This can cause confusion in the HID core resulting in nasty side-effects such as OOB writes. Add a check to ensure that the report ID in the response, matches the one that was requested. If it doesn't, omit reporting the raw event and return early.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 , < 516da3f25cfe18643835af1cf09b0e9ffc36c383 (git)
Affected: 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 , < a61163daf8a90b4a7ef154d5fc9c525f665734e3 (git)
Affected: 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 , < 74c6015375d8b9bc1b1eb79f20636c8e894bcad7 (git)
Affected: 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 , < c7a27bb4d0f6573ca0f9c7ef0b63291486239190 (git)
Affected: 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 , < 6a4acd3e86fe5584050c213d95147eba33856033 (git)
Affected: 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 , < 7f66fdbc077faed3b52519228d21d81979e92249 (git)
Affected: 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 , < 2edc92f89eee328b5be5706b5d431bf90669e9c0 (git)
Affected: 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 , < e716edafedad4952fe3a4a273d2e039a84e8681a (git)
Affected: fee906f035f0bd18ff12d84d58766c44a2ab0918 (git)
Affected: 4.3.6 , < 4.4 (semver)
Create a notification for this product.
Linux Linux Affected: 4.4
Unaffected: 0 , < 4.4 (semver)
Unaffected: 5.10.253 , ≤ 5.10.* (semver)
Unaffected: 5.15.203 , ≤ 5.15.* (semver)
Unaffected: 6.1.168 , ≤ 6.1.* (semver)
Unaffected: 6.6.134 , ≤ 6.6.* (semver)
Unaffected: 6.12.81 , ≤ 6.12.* (semver)
Unaffected: 6.18.22 , ≤ 6.18.* (semver)
Unaffected: 6.19.12 , ≤ 6.19.* (semver)
Unaffected: 7.0 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/hid/hid-multitouch.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "516da3f25cfe18643835af1cf09b0e9ffc36c383",
              "status": "affected",
              "version": "6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095",
              "versionType": "git"
            },
            {
              "lessThan": "a61163daf8a90b4a7ef154d5fc9c525f665734e3",
              "status": "affected",
              "version": "6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095",
              "versionType": "git"
            },
            {
              "lessThan": "74c6015375d8b9bc1b1eb79f20636c8e894bcad7",
              "status": "affected",
              "version": "6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095",
              "versionType": "git"
            },
            {
              "lessThan": "c7a27bb4d0f6573ca0f9c7ef0b63291486239190",
              "status": "affected",
              "version": "6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095",
              "versionType": "git"
            },
            {
              "lessThan": "6a4acd3e86fe5584050c213d95147eba33856033",
              "status": "affected",
              "version": "6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095",
              "versionType": "git"
            },
            {
              "lessThan": "7f66fdbc077faed3b52519228d21d81979e92249",
              "status": "affected",
              "version": "6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095",
              "versionType": "git"
            },
            {
              "lessThan": "2edc92f89eee328b5be5706b5d431bf90669e9c0",
              "status": "affected",
              "version": "6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095",
              "versionType": "git"
            },
            {
              "lessThan": "e716edafedad4952fe3a4a273d2e039a84e8681a",
              "status": "affected",
              "version": "6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "fee906f035f0bd18ff12d84d58766c44a2ab0918",
              "versionType": "git"
            },
            {
              "lessThan": "4.4",
              "status": "affected",
              "version": "4.3.6",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/hid/hid-multitouch.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.4"
            },
            {
              "lessThan": "4.4",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.253",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.203",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.168",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.134",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.81",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.22",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.253",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.203",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.168",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.134",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.81",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.22",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.12",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.3.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: multitouch: Check to ensure report responses match the request\n\nIt is possible for a malicious (or clumsy) device to respond to a\nspecific report\u0027s feature request using a completely different report\nID.  This can cause confusion in the HID core resulting in nasty\nside-effects such as OOB writes.\n\nAdd a check to ensure that the report ID in the response, matches the\none that was requested.  If it doesn\u0027t, omit reporting the raw event and\nreturn early."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable path is reachable by a local process through /dev/uhid by creating a synthetic HID multitouch device and replying to the kernel\u0027s UHID_GET_REPORT with a mismatched report ID. Malicious physical HID devices can also trigger it, but UHID provides a higher-severity local device-file path.\nAC:L - The attacker controls the HID report descriptor and the feature-report response contents, and the bug is triggered deterministically during probe/open/resume feature fetching. There is no race or condition outside the attacker\u0027s control.\nPR:L - The local UHID path requires only access to the UHID character device as a low-privileged local user or permitted device group member. The kernel UHID create/reply path has no capable() gate requiring real root.\nUI:N - A local UHID attacker can create the virtual device and answer the kernel\u0027s GET_REPORT request directly. No separate victim action is required.\nS:U - The corruption occurs within the kernel HID/HID-core processing context and affects the same kernel security authority. It is not a VM escape, IOMMU bypass, or cross-authority boundary change.\nC:H - The fix commit states that the mismatched report response can lead to HID-core confusion with out-of-bounds writes. Kernel memory corruption is reasonably capable of producing arbitrary information disclosure primitives.\nI:H - An out-of-bounds write in kernel memory is high-integrity impact because it can corrupt kernel objects and plausibly be developed into control-flow hijack or privilege escalation. When uncertain, the higher severity is appropriate.\nA:H - The same kernel memory corruption can crash or panic the kernel during HID report processing. Even without full exploitation, repeated triggering can cause high availability impact."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:25:32.795Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/516da3f25cfe18643835af1cf09b0e9ffc36c383"
        },
        {
          "url": "https://git.kernel.org/stable/c/a61163daf8a90b4a7ef154d5fc9c525f665734e3"
        },
        {
          "url": "https://git.kernel.org/stable/c/74c6015375d8b9bc1b1eb79f20636c8e894bcad7"
        },
        {
          "url": "https://git.kernel.org/stable/c/c7a27bb4d0f6573ca0f9c7ef0b63291486239190"
        },
        {
          "url": "https://git.kernel.org/stable/c/6a4acd3e86fe5584050c213d95147eba33856033"
        },
        {
          "url": "https://git.kernel.org/stable/c/7f66fdbc077faed3b52519228d21d81979e92249"
        },
        {
          "url": "https://git.kernel.org/stable/c/2edc92f89eee328b5be5706b5d431bf90669e9c0"
        },
        {
          "url": "https://git.kernel.org/stable/c/e716edafedad4952fe3a4a273d2e039a84e8681a"
        }
      ],
      "title": "HID: multitouch: Check to ensure report responses match the request",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-43047",
    "datePublished": "2026-05-01T14:15:42.562Z",
    "dateReserved": "2026-05-01T14:12:55.979Z",
    "dateUpdated": "2026-08-05T12:25:32.795Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-43047",
      "date": "2026-08-10",
      "epss": "0.0012",
      "percentile": "0.02157"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-43047\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-05-01T15:16:51.073\",\"lastModified\":\"2026-06-17T10:48:49.913\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nHID: multitouch: Check to ensure report responses match the request\\n\\nIt is possible for a malicious (or clumsy) device to respond to a\\nspecific report\u0027s feature request using a completely different report\\nID.  This can cause confusion in the HID core resulting in nasty\\nside-effects such as OOB writes.\\n\\nAdd a check to ensure that the report ID in the response, matches the\\none that was requested.  If it doesn\u0027t, omit reporting the raw event and\\nreturn early.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/hid/hid-multitouch.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095\",\"lessThan\":\"516da3f25cfe18643835af1cf09b0e9ffc36c383\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095\",\"lessThan\":\"a61163daf8a90b4a7ef154d5fc9c525f665734e3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095\",\"lessThan\":\"74c6015375d8b9bc1b1eb79f20636c8e894bcad7\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095\",\"lessThan\":\"c7a27bb4d0f6573ca0f9c7ef0b63291486239190\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095\",\"lessThan\":\"6a4acd3e86fe5584050c213d95147eba33856033\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095\",\"lessThan\":\"7f66fdbc077faed3b52519228d21d81979e92249\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095\",\"lessThan\":\"2edc92f89eee328b5be5706b5d431bf90669e9c0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095\",\"lessThan\":\"e716edafedad4952fe3a4a273d2e039a84e8681a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"fee906f035f0bd18ff12d84d58766c44a2ab0918\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4.3.6\",\"lessThan\":\"4.4\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/hid/hid-multitouch.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.4\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.4\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.253\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.203\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.168\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.134\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.81\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.22\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.19.12\",\"lessThanOrEqual\":\"6.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.4\",\"versionEndExcluding\":\"5.10.253\",\"matchCriteriaId\":\"15075416-60DB-47BE-9105-E0E2EC70553F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.203\",\"matchCriteriaId\":\"20DDB3E9-AABF-4107-ADB0-5362AA067045\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.168\",\"matchCriteriaId\":\"E2DDDCA1-6DAB-4018-B920-8F045DDD8D3B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.134\",\"matchCriteriaId\":\"F56F925B-BAF8-4F4B-B62F-1496AF19A307\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.81\",\"matchCriteriaId\":\"6EF80433-B33B-43C5-8E64-0FA7B8DCE1BC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.22\",\"matchCriteriaId\":\"C9DF8BCE-36D3-475D-9D21-19E4F02F9029\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"6.19.12\",\"matchCriteriaId\":\"0A2B9540-02D5-41B4-B16A-82AF66FD4F36\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:4.3.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F81F522-54E6-4EBA-B6C1-EB0E5DAA28A2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"F253B622-8837-4245-BCE5-A7BF8FC76A16\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"F666C8D8-6538-46D4-B318-87610DE64C34\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"02259FDA-961B-47BC-AE7F-93D7EC6E90C2\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/2edc92f89eee328b5be5706b5d431bf90669e9c0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/516da3f25cfe18643835af1cf09b0e9ffc36c383\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6a4acd3e86fe5584050c213d95147eba33856033\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/74c6015375d8b9bc1b1eb79f20636c8e894bcad7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7f66fdbc077faed3b52519228d21d81979e92249\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a61163daf8a90b4a7ef154d5fc9c525f665734e3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c7a27bb4d0f6573ca0f9c7ef0b63291486239190\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e716edafedad4952fe3a4a273d2e039a84e8681a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-07-02T12:49:37+00:00",
      "cve": "CVE-2026-43047",
      "id": "CVE-2026-43047",
      "initial_release_date": "2026-05-01T00:00:00+00:00",
      "product_status:known_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: HID: multitouch: Check to ensure report responses match the request",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43047.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-22T00:03:56Z",
      "cve": "CVE-2026-43047",
      "id": "CVE-2026-43047",
      "initial_release_date": "2026-05-07T02:19:39Z",
      "product_status:known_affected": "175",
      "product_status:known_not_affected": "31",
      "product_status:recommended": "128",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-43047",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-43047.json",
      "version": "5"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.