Array Out-of-Bounds Vulnerability in Linux Kernel Affecting FocalTech

CVE-2026-80574

What is CVE-2026-80574?

A vulnerability found in the Linux kernel's handling of input packets from FocalTech causes potential array out-of-bounds access. Specifically, when processing a packet, an incorrect index calculation allows manipulation that could lead to overwriting an unintended memory space, possibly affecting system stability and security. The issue arises when the finger index is incorrectly defined, resulting in an attempt to access an out-of-bounds element in the fingers array, which can occur if the finger index is zero. This vulnerability highlights the need for careful management of array boundaries in low-level code.

References