InfoSec Signals™
Sign InStart Free
Back to CVE records
Not yet scoredPublished Jul 19, 2026

CVE-2026-63943Input: xpad - fix out-of-bounds access for Share button

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadone_process_packet() receives len directly from urb->actual_length and uses it to index the share-button byte at data[len - 18] or data[len - 26]. Since both len and data[0] are under the device's control, a broken controller can send a GIP_CMD_INPUT packet with actual_length < 18 (e.g. 5 bytes) and reach this code path, causing accesses beyond the actual array. Fix this by calculating the offset and checking bounds against the packet length.

CVSS
Not yet scored
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Awaiting Analysis
Record last updated
Jul 19, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from cbc82e7db16d59c301457312a624a7de2c03cd4a before bcfb4833cd4078a1a356ef451838b75cd233099e; 302a0cd0bbc450998429a3f4267970a4b93251a8 builds before 37ec54abfdd63a63fd50734a9c4e4cbc1e5795af; from 4ef46367073b107ec22f46fe5f12176e87c238e8 before 9749db57233b396353ad5dee81eec9d9880c9246; from 4ef46367073b107ec22f46fe5f12176e87c238e8 before 6346b0895b574ce45f3747b9c508c72f70e6abef; from 4ef46367073b107ec22f46fe5f12176e87c238e8 before 6cdc46b38cf146ce81d4831b6472dbf7731849a2; a7e3ddd1d9a3d0b26465ed01d464e3c05479ebc8; from 6.6.91 before 6.6.143; from 6.12.29 before 6.12.93; and 1 more ranges
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.