CVE-2026-63943

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> Input: xpad - fix out-of-bounds access for Share button<br /> <br /> xpadone_process_packet() receives len directly from urb-&gt;actual_length<br /> and uses it to index the share-button byte at data[len - 18] or<br /> data[len - 26]. Since both len and data[0] are under the device&amp;#39;s<br /> control, a broken controller can send a GIP_CMD_INPUT packet with<br /> actual_length