CVE-2026-63943
Published Jul 19, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadone_process_packet() receives len directly from urb->actual_length and uses it to index the share-button byte at data[len - 18] or data[len - 26]. Since both len and data[0] are under the device's control, a broken controller can send a GIP_CMD_INPUT packet with actual_length < 18 (e.g. 5 bytes) and reach this code path, causing accesses beyond the actual array. Fix this by calculating the offset and checking bounds against the packet length.
Is your site exposed to CVE-2026-63943?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/37ec54abfdd63a63fd50734a9c4e4cbc1e5795af
https://git.kernel.org/stable/c/6346b0895b574ce45f3747b9c508c72f70e6abef
https://git.kernel.org/stable/c/6cdc46b38cf146ce81d4831b6472dbf7731849a2
https://git.kernel.org/stable/c/9749db57233b396353ad5dee81eec9d9880c9246
https://git.kernel.org/stable/c/bcfb4833cd4078a1a356ef451838b75cd233099e
Frequently Asked Questions
What is CVE-2026-63943? +
In the Linux kernel, the following vulnerability has been resolved:
Input: xpad - fix out-of-bounds access for Share button
xpadone_process_packet() receives len directly from urb->actual_length
and uses it to index the share-button byte at data[len - 18] or
data[len - 26]. Since both len and data[0] are under the device's
control, a broken controller can send a GIP_CMD_INPUT packet with
actual_length < 18 (e.g. 5 bytes) and reach this code path, causing
accesses beyond the actual array.
Fix this by calculating the offset and checking bounds against the
packet length.
How do I check if I'm vulnerable to CVE-2026-63943? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.