CVE-2026-90328

Full vulnerability record from the local CVENow database.

Description

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Reject short reads Steam Controller FEATURE reports encode the size of the message in the message itself. Previously we were trusting that the size reported matched the size we actually read, leading to a potential issue with short reads. Instead, we should actually verify the length of the read.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published

2026-09-17 17:17:30.940000

Last modified

2026-10-30 13:20:49.843000

View original CVE JSON

{
  "id": "CVE-2026-90328",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2026-09-17T17:17:30.940",
  "lastModified": "2026-10-30T13:20:49.843",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: steam: Reject short reads\n\nSteam Controller FEATURE reports encode the size of the message in the\nmessage itself. Previously we were trusting that the size reported matched\nthe size we actually read, leading to a potential issue with short reads.\nInstead, we should actually verify the length of the read."
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "drivers/hid/hid-steam.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "c164d6abf3841ffacfdb757c10616f9cb1f67276",
              "lessThan": "304b24432c7ab40d63cd698729a7305c3b8eada2",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "c164d6abf3841ffacfdb757c10616f9cb1f67276",
              "lessThan": "37cb84b992718924dc334ce584c703333a6a4217",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "c164d6abf3841ffacfdb757c10616f9cb1f67276",
              "lessThan": "cbcc9b0ccbbd33125ffc9479fb8f69ac969fe55c",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "c164d6abf3841ffacfdb757c10616f9cb1f67276",
              "lessThan": "f694ea0ead544080949e409a7c6885ee1fc77a98",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "c164d6abf3841ffacfdb757c10616f9cb1f67276",
              "lessThan": "93c5cc35bcd9f62db589a21945b49691dccdd99d",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "c164d6abf3841ffacfdb757c10616f9cb1f67276",
              "lessThan": "33ff7b49c38b39b1f3d27db508ac0720fb25c08a",
              "versionType": "git",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "drivers/hid/hid-steam.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "4.18",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "4.18",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.1.191",
              "lessThanOrEqual": "6.1.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.6.160",
              "lessThanOrEqual": "6.6.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.12.114",
              "lessThanOrEqual": "6.12.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.18.52",
              "lessThanOrEqual": "6.18.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.2.6",
              "lessThanOrEqual": "7.2.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.3",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/304b24432c7ab40d63cd698729a7305c3b8eada2",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/33ff7b49c38b39b1f3d27db508ac0720fb25c08a",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/37cb84b992718924dc334ce584c703333a6a4217",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/93c5cc35bcd9f62db589a21945b49691dccdd99d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/cbcc9b0ccbbd33125ffc9479fb8f69ac969fe55c",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/f694ea0ead544080949e409a7c6885ee1fc77a98",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}