CVE-2026-63943

Description

In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadone_process_packet() receives len directly from urb->actual_length and uses it to index the share-button byte at data[len - 18] or data[len - 26]. Since both len and data[0] are under the device's control, a broken controller can send a GIP_CMD_INPUT packet with actual_length < 18 (e.g. 5 bytes) and reach this code path, causing accesses beyond the actual array. Fix this by calculating the offset and checking bounds against the packet length.

Is your site exposed to CVE-2026-63943?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0020

Probability of exploitation

0.10%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/37ec54abfdd63a63fd50734a9c4e4cbc1e5795af https://git.kernel.org/stable/c/6346b0895b574ce45f3747b9c508c72f70e6abef https://git.kernel.org/stable/c/6cdc46b38cf146ce81d4831b6472dbf7731849a2 https://git.kernel.org/stable/c/9749db57233b396353ad5dee81eec9d9880c9246 https://git.kernel.org/stable/c/bcfb4833cd4078a1a356ef451838b75cd233099e

Frequently Asked Questions

What is CVE-2026-63943? +

In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadone_process_packet() receives len directly from urb->actual_length and uses it to index the share-button byte at data[len - 18] or data[len - 26]. Since both len and data[0] are under the device's control, a broken controller can send a GIP_CMD_INPUT packet with actual_length < 18 (e.g. 5 bytes) and reach this code path, causing accesses beyond the actual array. Fix this by calculating the offset and checking bounds against the packet length.

How do I check if I'm vulnerable to CVE-2026-63943? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.