CVE-2026-90328

A flaw was found in the Human Interface Device HID subsystem of the Linux kernel, specifically within the Steam Controller driver. This vulnerability arises because the driver trusts the message size encoded within Steam Controller FEATURE reports without verifying that the reported size matches...

PT-2026-94676

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the HID steam driver where Steam Controller FEATURE reports encode the message size within the message itself. The system previously trusted that the reported size...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the HID Steam driver’s reliance on messages encoded in the Steam Controller FEATURE report. The driver does not verify the actual length of the read data, which can lead to short-read issues...