https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 23:48:01 +0000 https://vulnerability.circl.lu/vuln/cve-2026-63943 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Input: xpad - fix out-of-bounds access for Share button</p> <p>xpadone_process_packet() receives len directly from urb-&gt;actual_length and uses it to index the share-button byte at data[len - 18] or data[len - 26]. Since both len and data[0] are under the device&#39;s control, a broken controller can send a GIP_CMD_INPUT packet with actual_length &lt; 18 (e.g. 5 bytes) and reach this code path, causing accesses beyond the actual array.</p> <p>Fix this by calculating the offset and checking bounds against the packet length.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Input: xpad - fix out-of-bounds access for Share button</p> <p>xpadone_process_packet() receives len directly from urb-&gt;actual_length and uses it to index the share-button byte at data[len - 18] or data[len - 26]. Since both len and data[0] are under the device&#39;s control, a broken controller can send a GIP_CMD_INPUT packet with actual_length &lt; 18 (e.g. 5 bytes) and reach this code path, causing accesses beyond the actual array.</p> <p>Fix this by calculating the offset and checking bounds against the packet length.</p> https://vulnerability.circl.lu/vuln/cve-2026-63943