---
id: CVE-2026-43047
title: 'HID: multitouch: Check to ensure report responses match the request'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  HID: multitouch: Check to ensure report responses match the request

  It is possible for a malicious (or clumsy) device to respond to a
  specific report's feature request…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 <
    516da3f25cfe18643835af1cf09b0e9ffc36c383
  - >-
    Linux >= 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 <
    a61163daf8a90b4a7ef154d5fc9c525f665734e3
  - >-
    Linux >= 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 <
    74c6015375d8b9bc1b1eb79f20636c8e894bcad7
  - >-
    Linux >= 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 <
    c7a27bb4d0f6573ca0f9c7ef0b63291486239190
  - >-
    Linux >= 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 <
    6a4acd3e86fe5584050c213d95147eba33856033
  - >-
    Linux >= 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 <
    7f66fdbc077faed3b52519228d21d81979e92249
  - >-
    Linux >= 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 <
    2edc92f89eee328b5be5706b5d431bf90669e9c0
  - >-
    Linux >= 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 <
    e716edafedad4952fe3a4a273d2e039a84e8681a
  - Linux fee906f035f0bd18ff12d84d58766c44a2ab0918
  - Linux >= 4.3.6 < 4.4
  - Linux 4.4
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T15:13:55.670356Z'
published: '2026-05-01'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T15:20:29.882Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-43047'
references:
  - url: 'https://git.kernel.org/stable/c/516da3f25cfe18643835af1cf09b0e9ffc36c383'
  - url: 'https://git.kernel.org/stable/c/a61163daf8a90b4a7ef154d5fc9c525f665734e3'
  - url: 'https://git.kernel.org/stable/c/74c6015375d8b9bc1b1eb79f20636c8e894bcad7'
  - url: 'https://git.kernel.org/stable/c/c7a27bb4d0f6573ca0f9c7ef0b63291486239190'
  - url: 'https://git.kernel.org/stable/c/6a4acd3e86fe5584050c213d95147eba33856033'
  - url: 'https://git.kernel.org/stable/c/7f66fdbc077faed3b52519228d21d81979e92249'
  - url: 'https://git.kernel.org/stable/c/2edc92f89eee328b5be5706b5d431bf90669e9c0'
  - url: 'https://git.kernel.org/stable/c/e716edafedad4952fe3a4a273d2e039a84e8681a'
tags:
  - cve.org
epss: 0.0012
epssPercentile: 0.01716
ingestedAt: '2026-10-16T17:24:46.678Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

HID: multitouch: Check to ensure report responses match the request

It is possible for a malicious (or clumsy) device to respond to a
specific report's feature request using a completely different report
ID.  This can cause confusion in the HID core resulting in nasty
side-effects such as OOB writes.

Add a check to ensure that the report ID in the response, matches the
one that was requested.  If it doesn't, omit reporting the raw event and
return early.

## Affected

- `Linux >= 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 < 516da3f25cfe18643835af1cf09b0e9ffc36c383`
- `Linux >= 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 < a61163daf8a90b4a7ef154d5fc9c525f665734e3`
- `Linux >= 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 < 74c6015375d8b9bc1b1eb79f20636c8e894bcad7`
- `Linux >= 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 < c7a27bb4d0f6573ca0f9c7ef0b63291486239190`
- `Linux >= 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 < 6a4acd3e86fe5584050c213d95147eba33856033`
- `Linux >= 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 < 7f66fdbc077faed3b52519228d21d81979e92249`
- `Linux >= 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 < 2edc92f89eee328b5be5706b5d431bf90669e9c0`
- `Linux >= 6d4f5440a3a2bb2e9d0d582bbf98234e9e9bb095 < e716edafedad4952fe3a4a273d2e039a84e8681a`
- `Linux fee906f035f0bd18ff12d84d58766c44a2ab0918`
- `Linux >= 4.3.6 < 4.4`
- `Linux 4.4`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.