CVE-2026-63943

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds access issue exists in the xpadone process packet() function. The function uses the len value obtained from urb->actual length to index the share-button byte at data[len - 18] or data[len - 26]. Because both len and data[0] are controlled by the device, a malfunctioning controller could send a GIP CMD INPUT packet with an actual length of less than 18 bytes, leading to memory access beyond the array boundaries.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.