Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-90328 →

DEBIAN-CVE-2026-90328

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Reject short reads Steam Controller FEATURE reports encode the size...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Reject short reads Steam Controller FEATURE reports encode the size of the message in the message itself. Previously we were trusting that the size reported matched the size we actually read, leading to a potential issue with short reads. Instead, we should actually verify the length of the read.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 linux

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 linux

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 linux

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.6-1"}]}]

Références

advisory security-tracker.debian.org