CVE-2026-64275

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

Input: elan_i2c - prevent division by zero and arithmetic underflow

The Elan I2C touchpad driver queries the device for its physical

dimensions and trace counts to calculate the device resolution and width.

However, if the device firmware or device tree provides invalid zero

values for x_traces or y_traces, it results in a fatal division-by-zero

exception leading to a kernel panic during device probe.

Add checks to ensure these parameters are non-zero before performing

the division. If invalid trace values are detected, fall back to a safe

default of 1.

Additionally, prevent an arithmetic underflow in the touch reporting

logic. Previously, if the calculated or fallback width was smaller than

ETP_FWIDTH_REDUCE (90), the subtraction would underflow, resulting in a

massive unsigned integer being reported to userspace. Clamp the adjusted

width to a minimum of 0 to safely handle small physical dimensions and

fallback sc

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References