{
  "cveId": "CVE-2026-90328",
  "url": "https://patchblox.com/security/cve/CVE-2026-90328",
  "summary": "CVE-2026-90328 is fixed in linux on 1 platform, first by DEBIAN-CVE-2026-90328, released September 23, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  HID: steam: Reject short reads  Steam Controller...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  HID: steam: Reject short reads  Steam Controller FEATURE reports encode the size of the message in the message itself. Previously we were trusting that the size reported matched the size we actually read, leading to a potential issue with short reads. Instead, we should actually verify the length of the read.",
  "published": "2026-09-17T17:17:30Z",
  "severity": "",
  "epss": 0.00215,
  "epssPercentile": 0.11914,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.115-2",
      "fix": "DEBIAN-CVE-2026-90328",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-90328",
      "released": "2026-09-23T19:19:02Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.2.6-1",
      "fix": "DEBIAN-CVE-2026-90328",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-90328",
      "released": "2026-09-23T19:19:02Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}