Lenovo thanks Shuqiao Zhang of Tsinghua University for reporting this vulnerability.

ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated user to cause a system crash.