PT-2026-64494

In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported force-feedback effect index iforce process packet handles a status report packet id 0x02 by taking a force-feedback effect index straight from the device wire and using it to address the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992990)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992990 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: iforce - invert valid length check when fetching device IDs syzbot is reporting...

CVE-2022-49790 Input: iforce - invert valid length check when fetching device IDs

In the Linux kernel, the following vulnerability has been resolved: Input: iforce - invert valid length check when fetching device IDs syzbot is reporting uninitialized value at iforceinitdevice 1, for commit 6ac0aec6b0a6 "Input: iforce - allow callers supply data buffer when fetching device IDs"...

CVE-2022-49790

In the Linux kernel, the following vulnerability has been resolved: Input: iforce - invert valid length check when fetching device IDs syzbot is reporting uninitialized value at iforceinitdevice 1, for commit 6ac0aec6b0a6 "Input: iforce - allow callers supply data buffer when fetching device IDs"...