CVE-2026-90328

A flaw was found in the Human Interface Device HID subsystem of the Linux kernel, specifically within the Steam Controller driver. This vulnerability arises because the driver trusts the message size encoded within Steam Controller FEATURE reports without verifying that the reported size matches...