What is CVE-2026-64237?

CVE-2026-64237 is a unscored severity Linux kernel vulnerability. CVE-2026-64237 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-64237?

CVE-2026-64237 has a CVSS score of pending NVD analysis out of 10, rated awaiting scoring severity.

Is there a patch available for CVE-2026-64237?

Yes, CVE-2026-64237 has been patched. Fixed versions include 5.10.259, 5.15.210, 6.1.176 and others.

Is CVE-2026-64237 actively exploited?

CVE-2026-64237 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-64237

In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature (which resides at the end of the firmware blob) before accessing them to prevent potential out-of-bounds reads.

Package Linux Kernel

Published 2026-07-24

Last modified 2026-07-24

Patch available

Yes

Affected versions

Fixed in 5.10.259, 5.15.210, 6.1.176, 6.6.143, 6.12.93, 6.18.35, 7.0.12, 7.1 and their respective stable series.

Fixed in

✓ 5.10.259 5.10.x ✓ 5.15.210 5.15.x ✓ 6.1.176 6.1.x ✓ 6.6.143 6.6.x ✓ 6.12.93 6.12.x ✓ 6.18.35 6.18.x ✓ 7.0.12 7.0.x ✓ 7.1

References

8 total

Showing 5 of 8 references View all on NVD

Frequently asked questions

What is CVE-2026-64237?

CVE-2026-64237 is a unscored severity Linux kernel vulnerability . CVE-2026-64237 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
Is there a patch available for CVE-2026-64237?

Yes. CVE-2026-64237 has been patched. Fixed versions include 5.10.259, 5.15.210, 6.1.176 and others.
Is CVE-2026-64237 actively exploited?

No. CVE-2026-64237 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.