The Linux kernel's wacom HID driver function wacom_hid_set_device_mode assumed that the HID_DG_INPUTMODE usage was always in the first field of the feature report. However, some devices specify this usage in other fields. When HID_DG_INPUTMODE is in a different field and the first field's report_count is smaller than the usage_index, this caused an out-of-bounds write to the first field's value array. The fix involves storing the correct field index during feature mapping and adding bounds checks to ensure safe access before writing.

This vulnerability could lead to an out-of-bounds write in kernel memory, potentially causing system instability or enabling privilege escalation if exploited. However, no known exploits are reported in the wild at this time.

A fix has been implemented in the Linux kernel to address this vulnerability by correcting the field indexing and adding bounds checks. Users should apply the official Linux kernel updates that include this patch once available. Patch status is not yet confirmed; check the vendor advisory for current remediation guidance.