CVE-2026-64273

CVE-2026-64273 describes a Linux kernel issue in the iforce driver where a status packet uses a device-provided force-feedback effect index without proper bounds. Specifically, data[1] is masked with 0x7f (0–127) while core_effects[] only has IFORCE_EFFECTS_MAX (32) entries. For indices 32–127, t...