CVE Explorer

CVE-2026-64273

In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported force-feedback effect index iforce_process_packet() handles a status report (packet id 0x02) by taking a force-feedback effect index straight from the device wire and using it to address the per-effect state array: i = data[1] & 0x7f; if (data[1] & 0x80) { if (!test_and_set_bit(FF_CORE_IS_PLAYED, iforce->core_effects[i].flags)) ... } else if (test_and_clear_bit(FF_CO

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:bf085656c76f01eafa13e494661fe30c5c2c841f3f3a96a271d9450236a9a6fe

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/input/joystick/iforce/iforce-packets.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"b1b79e89bc33e4c682d3df7ae2aadc62b5a0c310","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"d10b0507fa0f5b46764b178e3271f9012f2df677","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"6c0f2901c9d325d4a0574c4237fd507810d225ff","status":"affected","version":…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9cee0753cd5353c50ef4478efa1c1b191286a0d162ec36b365a6aee72b1d2ae · sha256:9ff70d3891f95e25… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/input/joystick/iforce/iforce-packets.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.12"},{"lessThan":"2.6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","ver…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9cee0753cd5353c50ef4478efa1c1b191286a0d162ec36b365a6aee72b1d2ae · sha256:9ff70d3891f95e25… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9cee0753cd5353c50ef4478efa1c1b191286a0d162ec36b365a6aee72b1d2ae · sha256:9ff70d3891f95e25… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9cee0753cd5353c50ef4478efa1c1b191286a0d162ec36b365a6aee72b1d2ae · sha256:9ff70d3891f95e25… · /containers/cna/affected/1

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/0e9943d2e4c63496b6ca84bc66fd3c71d40558e2"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a9cee0753cd5353c50ef4478efa1c1b191286a0d162ec36b365a6aee72b1d2ae · sha256:9ff70d3891f95e25… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/6c0f2901c9d325d4a0574c4237fd507810d225ff"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a9cee0753cd5353c50ef4478efa1c1b191286a0d162ec36b365a6aee72b1d2ae · sha256:9ff70d3891f95e25… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/70019779325f2bb5f5a4098e91e79c655f50fcef"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a9cee0753cd5353c50ef4478efa1c1b191286a0d162ec36b365a6aee72b1d2ae · sha256:9ff70d3891f95e25… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/a40250f97c312e000e3616c9074022311a0efbc3"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a9cee0753cd5353c50ef4478efa1c1b191286a0d162ec36b365a6aee72b1d2ae · sha256:9ff70d3891f95e25… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/b1b79e89bc33e4c682d3df7ae2aadc62b5a0c310"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a9cee0753cd5353c50ef4478efa1c1b191286a0d162ec36b365a6aee72b1d2ae · sha256:9ff70d3891f95e25… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/c21295616a8a52b9a5f18cd4ca8c73030eda3d4f"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a9cee0753cd5353c50ef4478efa1c1b191286a0d162ec36b365a6aee72b1d2ae · sha256:9ff70d3891f95e25… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/d10b0507fa0f5b46764b178e3271f9012f2df677"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a9cee0753cd5353c50ef4478efa1c1b191286a0d162ec36b365a6aee72b1d2ae · sha256:9ff70d3891f95e25… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/e5fa31f0550b55d80045669ae9080dd5b88abffa"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a9cee0753cd5353c50ef4478efa1c1b191286a0d162ec36b365a6aee72b1d2ae · sha256:9ff70d3891f95e25… · /containers/cna/references/4

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer