CVE-2026-63943

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-07-19

Last updated on: 2026-07-27

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadone_process_packet() receives len directly from urb->actual_length and uses it to index the share-button byte at data[len - 18] or data[len - 26]. Since both len and data[0] are under the device's control, a broken controller can send a GIP_CMD_INPUT packet with actual_length < 18 (e.g. 5 bytes) and reach this code path, causing accesses beyond the actual array. Fix this by calculating the offset and checking bounds against the packet length.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-19

Last Modified

2026-07-27

Generated

2026-10-19

AI Q&A

2026-07-19

EPSS Evaluated

2026-10-18

NVD

CVE-2026-63943

EUVD

EUVD-2026-45716

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	cbc82e7db16d59c301457312a624a7de2c03cd4a
Linux	Linux	302a0cd0bbc450998429a3f4267970a4b93251a8
Linux	Linux	4ef46367073b107ec22f46fe5f12176e87c238e8
Linux	Linux	4ef46367073b107ec22f46fe5f12176e87c238e8
Linux	Linux	4ef46367073b107ec22f46fe5f12176e87c238e8
Linux	Linux	a7e3ddd1d9a3d0b26465ed01d464e3c05479ebc8
Linux	Linux	6.6.91
Linux	Linux	6.12.29
Linux	Linux	6.14.7
Linux	Linux	6.15

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is an out-of-bounds access issue in the Linux kernel's xpad driver. It occurs when processing input packets from a device controller. The driver incorrectly calculates an index into an array using a length value controlled by the device, which can be too small. This leads to reading or writing memory outside the intended array bounds, potentially causing crashes or other unexpected behavior.

Detection Guidance

This vulnerability is specific to the Linux kernel's xpad driver and affects USB input devices. Detection requires checking kernel logs for out-of-bounds access errors related to the xpad module. Use commands like dmesg | grep xpad or journalctl -k | grep xpad to inspect kernel logs for errors.

Impact Analysis

If exploited, this vulnerability could allow a malicious or faulty device to crash the system or execute arbitrary code with kernel privileges. Users might experience system instability, data corruption, or unauthorized access depending on the attacker's goals and system configuration.

Compliance Impact

This vulnerability is a Linux kernel out-of-bounds access issue in the xpad driver, which could allow memory corruption or crashes. It does not directly relate to data privacy or security controls required by GDPR or HIPAA, as it is a low-level driver flaw rather than a data exposure or access control issue.

Mitigation Strategies

Update your Linux kernel to the latest patched version. If a patched version is not yet available, consider disabling the xpad module temporarily using rmmod xpad or blacklisting it in /etc/modprobe.d/. Monitor vendor advisories for kernel updates.

Hi! I’m here to help you understand CVE-2026-63943. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70