CVE-2026-90328

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Reject short reads Steam Controller FEATURE reports encode the size of the message in the message itself. Previously we were trusting that the size reported matched the size we actually read, leading to a potential issue with short reads. Instead, we should actually verify the length of the read.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/33ff7b49c38b39b1f3d27db508ac0720fb25c08a
https://git.kernel.org/stable/c/93c5cc35bcd9f62db589a21945b49691dccdd99d
https://git.kernel.org/stable/c/f694ea0ead544080949e409a7c6885ee1fc77a98

Configurations

No configuration.

History

17 Sep 2026, 17:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-09-17 17:17

Updated : 2026-09-17 17:17

NVD link : CVE-2026-90328

Mitre link : CVE-2026-90328

CVE.ORG link : CVE-2026-90328

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-90328", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "c164d6abf3841ffacfdb757c10616f9cb1f67276", "lessThan": "f694ea0ead544080949e409a7c6885ee1fc77a98", "versionType": "git"}, {"status": "affected", "version": "c164d6abf3841ffacfdb757c10616f9cb1f67276", "lessThan": "93c5cc35bcd9f62db589a21945b49691dccdd99d", "versionType": "git"}, {"status": "affected", "version": "c164d6abf3841ffacfdb757c10616f9cb1f67276", "lessThan": "33ff7b49c38b39b1f3d27db508ac0720fb25c08a", "versionType": "git"}], "programFiles": ["drivers/hid/hid-steam.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.18"}, {"status": "unaffected", "version": "0", "lessThan": "4.18", "versionType": "semver"}, {"status": "unaffected", "version": "6.18.52", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.2.6", "versionType": "semver", "lessThanOrEqual": "7.2.*"}, {"status": "unaffected", "version": "7.3-rc1", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/hid/hid-steam.c"], "defaultStatus": "affected"}]}], "published": "2026-09-17T17:17:30.940", "references": [{"url": "https://git.kernel.org/stable/c/33ff7b49c38b39b1f3d27db508ac0720fb25c08a", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/93c5cc35bcd9f62db589a21945b49691dccdd99d", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/f694ea0ead544080949e409a7c6885ee1fc77a98", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: steam: Reject short reads\n\nSteam Controller FEATURE reports encode the size of the message in the\nmessage itself. Previously we were trusting that the size reported matched\nthe size we actually read, leading to a potential issue with short reads.\nInstead, we should actually verify the length of the read."}], "lastModified": "2026-09-17T17:17:30.940", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}