CVE-2026-63916

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds write exists in the wacom hid set device mode() function. The issue occurs because the function assumes the HID DG INPUTMODE usage is always located in the first field (field[0]) of the feature report. If a device specifies HID DG INPUTMODE in a different field and the first field has a report count smaller than the usage index of HID DG INPUTMODE, it results in an out-of-bounds write to r->field[0]->value.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.