Unrated severityNVD Advisory· Published Sep 17, 2026· Updated Oct 30, 2026
CVE-2026-90328
CVE-2026-90328
Description
In the Linux kernel, the following vulnerability has been resolved:
HID: steam: Reject short reads
Steam Controller FEATURE reports encode the size of the message in the message itself. Previously we were trusting that the size reported matched the size we actually read, leading to a potential issue with short reads. Instead, we should actually verify the length of the read.
Affected products
3- osv-coords2 versions
< 7.2.7-1.1+ 1 more
- (no CPE)range: < 7.2.7-1.1
- (no CPE)range: >= 4.18.0, < 6.1.191
Patches
Vulnerability mechanics
References
6- git.kernel.org/stable/c/304b24432c7ab40d63cd698729a7305c3b8eada2nvd
- git.kernel.org/stable/c/33ff7b49c38b39b1f3d27db508ac0720fb25c08anvd
- git.kernel.org/stable/c/37cb84b992718924dc334ce584c703333a6a4217nvd
- git.kernel.org/stable/c/93c5cc35bcd9f62db589a21945b49691dccdd99dnvd
- git.kernel.org/stable/c/cbcc9b0ccbbd33125ffc9479fb8f69ac969fe55cnvd
- git.kernel.org/stable/c/f694ea0ead544080949e409a7c6885ee1fc77a98nvd
News mentions
0No linked articles in our index yet.