The vulnerability in the cyttsp5 input driver causes the size field supplied by the device to be used directly as the length argument to memcpy(), writing into a fixed-size buffer. This allows a malformed HID report overflow the buffer, corrupting kernel memory. If successfully exploited, an attacker could induce kernel crashes or craft an execution path that ultimately leads to arbitrary code execution with kernel privileges. The weakness corresponds to an improper restriction of operations within bounds.

The issue targets the Linux kernel’s cyttsp5 driver. Any system running a kernel that includes this driver is potentially affected, regardless of distribution. No specific kernel release range is provided, so all kernels that load the cyttsp5 module should be considered at risk. The vendor is the Linux kernel project.

The CVSS score is 5.5, indicating a medium severity issue with potential for kernel memory corruption and arbitrary code execution. The EPSS score is less than 1%, indicating a very low but non‑zero probability of exploitation in the wild, and the vulnerability is not listed in CISA KEV, suggesting no publicly confirmed exploits yet. The likely attack vector is a malicious HID report sent to the vulnerable driver, which any user with access to the associated input device can craft. If successfully exploited, an attacker could gain kernel privileges on the host.