Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: HID: steam: Reject short reads Steam Controller FEATURE reports encode the size of the message in the message itself. Previously we were trusting that the size reported matched the size we actually read, leading to a potential issue with short reads. Instead, we should actually verify the length of the read.
References
- https://git.kernel.org/stable/c/33ff7b49c38b39b1f3d27db508ac0720fb25c08a
- https://git.kernel.org/stable/c/93c5cc35bcd9f62db589a21945b49691dccdd99d
- https://git.kernel.org/stable/c/f694ea0ead544080949e409a7c6885ee1fc77a98
FAQ
What is CVE-2026-90328?
CVE-2026-90328 is a documented vulnerability. In the Linux kernel, the following vulnerability has been resolved: HID: steam: Reject short reads Steam Controller FEATURE reports encode the size of the message in the message itself. Previously w...
How severe is CVE-2026-90328?
CVSS scoring is not yet available for CVE-2026-90328. Check NVD for updates.
Is there a patch for CVE-2026-90328?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.