HID: mcp2221: validate report size in mcp2221_raw_event()

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-89621 · Microsoft / collected KEV context

cve-program · CVE-2026-89621

• https://git.kernel.org/stable/c/cb38b1f149b7143355b37e86c841acf0076e5c2a
• https://git.kernel.org/stable/c/b2c67dc0e30c308647bbd9b9e5d69a44c9d2733d
• https://git.kernel.org/stable/c/fffcfa367072628c3144cca17d2a3c3c9e50c057
• https://git.kernel.org/stable/c/c1c508e8923911cb458234997e55b7a4b9aa066f
• https://git.kernel.org/stable/c/bdc6a3af0dd734a326acdb7d6401a3b6a9f4f149
• https://git.kernel.org/stable/c/127de5919820f88a9d55e8371ad4ac49f625f4c5
• https://git.kernel.org/stable/c/7c18fb36708a97ff6772825cc087b6d537bbf0d5
• https://git.kernel.org/stable/c/2c9a6998c19503626c57a2267bf279e204113079

No related operational record is retained in the current change model.