CVE-2026-90328
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: HID: steam: Reject short reads Steam Controller FEATURE reports encode the size of the message in the message itself. Previously we were trusting that the size reported matched the size we actually read, leading to a potential issue with short reads. Instead, we should actually verify the length of the read.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 17, 2026
First seenSep 17, 2026
How to fix
Update
- Linux Linux304b24432c7ab40d63cd698729a7305c3b8eada2, 37cb84b992718924dc334ce584c703333a6a4217, cbcc9b0ccbbd33125ffc9479fb8f69ac969fe55c, f694ea0ead544080949e409a7c6885ee1fc77a98, 93c5cc35bcd9f62db589a21945b49691dccdd99d, 33ff7b49c38b39b1f3d27db508ac0720fb25c08a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | c164d6abf3841ffacfdb757c10616f9cb1f67276 ≤ v < 304b24432c7ab40d63cd698729a7305c3b8eada2, c164d6abf3841ffacfdb757c10616f9cb1f67276 ≤ v < 37cb84b992718924dc334ce584c703333a6a4217, c164d6abf3841ffacfdb757c10616f9cb1f67276 ≤ v < cbcc9b0ccbbd33125ffc9479fb8f69ac969fe55c, c164d6abf3841ffacfdb757c10616f9cb1f67276 ≤ v < f694ea0ead544080949e409a7c6885ee1fc77a98, c164d6abf3841ffacfdb757c10616f9cb1f67276 ≤ v < 93c5cc35bcd9f62db589a21945b49691dccdd99d, c164d6abf3841ffacfdb757c10616f9cb1f67276 ≤ v < 33ff7b49c38b39b1f3d27db508ac0720fb25c08a, 4.18 | 304b24432c7ab40d63cd698729a7305c3b8eada2, 37cb84b992718924dc334ce584c703333a6a4217, cbcc9b0ccbbd33125ffc9479fb8f69ac969fe55c, f694ea0ead544080949e409a7c6885ee1fc77a98, 93c5cc35bcd9f62db589a21945b49691dccdd99d, 33ff7b49c38b39b1f3d27db508ac0720fb25c08a |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.