CVE-2026-64273

CVE-2026-64273 concerns a Linux kernel vulnerability in the iforce input path. The bug arises when a status packet (id 0x02) carries a device-reported force-feedback index, which is used directly to index core_effects. The code masks the index with 0x7f (0–127) but core_effects only has IFORCE_EF...