Log in Start free

Vulnerability · Published Sep 17, 2026 · Assigned by Linux

CVE-2026-90328HID: steam: Reject short reads

Unrated

In plain English

A security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS )–Not rated
Exploit odds (30 days)0.2%top 88.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Reject short reads Steam Controller FEATURE reports encode the size of the message in the message itself. Previously we were trusting that the size reported matched the size we actually read, leading to a potential issue with short reads. Instead, we should actually verify the length of the read.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linuxno fix listedDEBIAN-CVE-2026-90328
Debian:13linux6.12.115-2DEBIAN-CVE-2026-90328
Debian:14linux7.2.6-1DEBIAN-CVE-2026-90328
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2026-90328
Ubuntu:26.04:LTSlinux7.0.0-42.42UBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-90328
Ubuntu:26.04:LTSlinux-aws7.0.0-1016.17UBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-aws-7.0no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-90328
Ubuntu:26.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-azure-7.0no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-90328
Ubuntu:26.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-azure-fde-7.0no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-90328
Ubuntu:26.04:LTSlinux-gcp7.0.0-1016.18UBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-gcp-7.0no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-90328
Ubuntu:26.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-42.42~24.04.1UBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-90328
Ubuntu:26.04:LTSlinux-ibm7.0.0-1017.17UBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-90328
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-nvidia-7.0no fix listedUBUNTU-CVE-2026-90328
Ubuntu:26.04:LTSlinux-nvidia-bosno fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-90328
Ubuntu:26.04:LTSlinux-oem-7.07.0.0-1017.17UBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-90328
Ubuntu:26.04:LTSlinux-oracle7.0.0-1015.16UBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-oracle-7.0no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-90328
Ubuntu:26.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-90328
Ubuntu:26.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-90328
Ubuntu:26.04:LTSlinux-riscv7.0.0-42.42.1UBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-riscv-7.07.0.0-42.42.1~24.04.1UBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-vmwareno fix listedUBUNTU-CVE-2026-90328
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2026-90328
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2026-90328

Affected products (as reported)

VendorProductVersions
Linux Linux c164d6abf3841ffacfdb757c10616f9cb1f67276 – before 304b24432c7ab40d63cd698729a7305c3b8eada2c164d6abf3841ffacfdb757c10616f9cb1f67276 – before 37cb84b992718924dc334ce584c703333a6a4217c164d6abf3841ffacfdb757c10616f9cb1f67276 – before cbcc9b0ccbbd33125ffc9479fb8f69ac969fe55cc164d6abf3841ffacfdb757c10616f9cb1f67276 – before f694ea0ead544080949e409a7c6885ee1fc77a98c164d6abf3841ffacfdb757c10616f9cb1f67276 – before 93c5cc35bcd9f62db589a21945b49691dccdd99dc164d6abf3841ffacfdb757c10616f9cb1f67276 – before 33ff7b49c38b39b1f3d27db508ac0720fb25c08a
Linux Linux 4.18

References