HID: multitouch: fix out-of-bounds bit access on mt_io_flags

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-64364 · Microsoft / collected KEV context

cve-program · CVE-2026-64364

• https://git.kernel.org/stable/c/12e90656e330ff8bbaf2f29c535fdb8a11cc6f55
• https://git.kernel.org/stable/c/152983d87387f6a8ae72b73474cfa55fbcf1ec75
• https://git.kernel.org/stable/c/b5c037d6b807017e74a115288f81bc9cd5a5aab8
• https://git.kernel.org/stable/c/a6d5ce2e1a2d7bf189bde8a659d04b65f0b0725d
• https://git.kernel.org/stable/c/e24918ee67c4dc3d20d4670750e46e9b160365f4
• https://git.kernel.org/stable/c/37daa8c96bd563d03150e23f094cb60703594a6d
• https://git.kernel.org/stable/c/6493ebf9489efef0105078377b973ab33d51af22
• https://git.kernel.org/stable/c/8813b0612275cc61fe9e6603d0ee019247ade6be

No related operational record is retained in the current change model.