In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadone_process_packet()… (CVE-2026-63943)
A vulnerability in the Linux kernel's xpad driver allowed out-of-bounds memory access when processing input packets from the Share button. This occurred because the function xpadone_process_packet() used the packet length directly from the device without proper bounds checking, enabling a malformed packet with insufficient length to cause invalid memory access. The issue has been fixed by adding proper offset calculation and bounds checking against the packet length.
AI Analysis
Technical Summary
The Linux kernel xpad driver had a vulnerability (CVE-2026-63943) where the function xpadone_process_packet() used the actual_length field from a USB request block (urb) directly to index into the data array for the Share button. Since both the length and data are controlled by the device, a malicious or broken controller could send a packet with actual_length less than 18 bytes, causing out-of-bounds access beyond the data array. This could lead to memory corruption or kernel instability. The fix involved calculating the offset properly and verifying that the packet length is sufficient before accessing the data array.
Potential Impact
The vulnerability allows a device-controlled input packet to cause out-of-bounds memory access in kernel space, which may lead to memory corruption or kernel crashes. There is no evidence of known exploits in the wild. The impact is limited to systems using the vulnerable xpad driver in the Linux kernel and receiving crafted input from a malicious or faulty device.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this vulnerability by adding proper bounds checking in the xpad driver. Users should apply the official kernel updates that include this patch. Since this is a kernel-level fix, updating to a patched kernel version is the recommended remediation. Patch status is not explicitly confirmed here; check the vendor or Linux kernel advisory for the exact fixed versions and update instructions.
In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadone_process_packet()… (CVE-2026-63943)
Description
A vulnerability in the Linux kernel's xpad driver allowed out-of-bounds memory access when processing input packets from the Share button. This occurred because the function xpadone_process_packet() used the packet length directly from the device without proper bounds checking, enabling a malformed packet with insufficient length to cause invalid memory access. The issue has been fixed by adding proper offset calculation and bounds checking against the packet length.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel xpad driver had a vulnerability (CVE-2026-63943) where the function xpadone_process_packet() used the actual_length field from a USB request block (urb) directly to index into the data array for the Share button. Since both the length and data are controlled by the device, a malicious or broken controller could send a packet with actual_length less than 18 bytes, causing out-of-bounds access beyond the data array. This could lead to memory corruption or kernel instability. The fix involved calculating the offset properly and verifying that the packet length is sufficient before accessing the data array.
Potential Impact
The vulnerability allows a device-controlled input packet to cause out-of-bounds memory access in kernel space, which may lead to memory corruption or kernel crashes. There is no evidence of known exploits in the wild. The impact is limited to systems using the vulnerable xpad driver in the Linux kernel and receiving crafted input from a malicious or faulty device.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this vulnerability by adding proper bounds checking in the xpad driver. Users should apply the official kernel updates that include this patch. Since this is a kernel-level fix, updating to a patched kernel version is the recommended remediation. Patch status is not explicitly confirmed here; check the vendor or Linux kernel advisory for the exact fixed versions and update instructions.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-p7rq-pjmq-p6gw
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-63943"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a5d27aa2a4a8d598912e587
Added to database: 07/19/2026, 19:38:18 UTC
Last enriched: 07/19/2026, 20:04:05 UTC
Last updated: 07/20/2026, 17:26:47 UTC
Views: 14
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.