CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's handling of input packets from joystick and wheel devices, specifically in the iforce_process_packet() function, which improperly validates packet lengths. This oversight can lead to potential data corruption or denial of service due to the processing of incomplete data. Organizations using Linux systems that interface with these input devices should prioritize patching to mitigate the risk of exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: Input: iforce - validate input packet lengths iforce_process_packet() reads fixed fields from joystick, wheel and status packets without first checking their lengths. In particular, the shared hats-and-buttons helper unconditionally reads data[6]. The status tail is a sequence of 16-bit effect addresses, but an incomplete final address is also consumed. A successful zero-length USB URB additionally reads the packet ID before the common parser is called. Reject the zero-length USB transfer, require the seven-byte joystick and wheel prefixes and the two-byte status prefix, and consume only complete status-tail addresses.