CVE-2026-80573

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the iforce process packet() function where input packet lengths for joystick, wheel, and status packets are not validated before reading fixed fields. Specifically, a shared hats-and-buttons helper unconditionally reads data[6], and the status tail consumes incomplete 16-bit effect addresses. Additionally, a zero-length USB URB (USB Request Block, a data structure used to manage USB transfers) allows the reading of the packet ID before the common parser is executed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.