vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-90328

HID: steam: Reject short reads

N/A
Published: September 17, 2026 at 04:08 PM UTC
Updated: October 21, 2026 at 01:20 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Reject short reads Steam Controller FEATURE reports encode the size of the message in the message itself. Previously we were trusting that the size reported matched the size we actually read, leading to a potential issue with short reads. Instead, we should actually verify the length of the read.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
4.18c164d6abf3841ffacfdb757c10616f9cb1f67276
Vendor states this is fixed in 33ff7b49c38b39b1f3d27db508ac0720fb25c08a (fixed)
Vendor states this is fixed in 93c5cc35bcd9f62db589a21945b49691dccdd99d (fixed)
Vendor states this is fixed in f694ea0ead544080949e409a7c6885ee1fc77a98 (fixed)
Vendor states this is fixed in 4.18 (unaffected)
Vendor states this is fixed in 6.12.114 (unaffected)
Vendor states this is fixed in 6.18.52 (unaffected)
Vendor states this is fixed in 6.6.160 (unaffected)
Vendor states this is fixed in 7.2.6 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (5)

Source: cverecord
https://git.kernel.org/stable/c/f694ea0ead544080949e409a7c6885ee1fc77a98
Source: cverecord
https://git.kernel.org/stable/c/93c5cc35bcd9f62db589a21945b49691dccdd99d
Source: cverecord
https://git.kernel.org/stable/c/33ff7b49c38b39b1f3d27db508ac0720fb25c08a
Source: cverecord
https://git.kernel.org/stable/c/37cb84b992718924dc334ce584c703333a6a4217
Source: cverecord
https://git.kernel.org/stable/c/cbcc9b0ccbbd33125ffc9479fb8f69ac969fe55c

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card