CVE-2026-64273
kernel: Input: iforce - bound the device-reported force-feedback effect index
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 25, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's iforce input driver. A malicious actor with a specially crafted input device could exploit an out-of-bounds write vulnerability by sending an unvalidated force-feedback effect index. This could allow the attacker to corrupt memory, potentially leading to system instability or other unpredictable behavior.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-787 · Out-of-bounds Write