Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: Input: iforce - validate input packet lengths iforce_process_packet() reads fixed fields from joystick, wheel and status packets without first checking their lengths. In particular, the shared hats-and-buttons helper unconditionally reads data[6]. The status tail is a sequence of 16-bit effect addresses, but an incomplete final address is also consumed. A successful zero-length USB URB additionally reads the packet ID before the common parser is called. Reject the zero-length USB transfer, require the seven-byte joystick and wheel prefixes and the two-byte status prefix, and consume only complete status-tail addresses.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-26 | 1 | Disclosure1 |
| 2026-08-28 | 1 | Patch1 |
CVE-2026-80573 In the Linux kernel, the following vulnerability has been resolved: Input: iforce - validate input packet lengths iforce_process_packet() reads fixed fields from jo… https://www.cve.org/CVERecord?id=CVE-2026-80573
Post summary
CVE-2026-80573, affecting the Linux kernel, has been resolved, with brief technical details provided, but no PoC, exploit code, or active exploitation mentioned.
CVE-2026-80573 Linux Kernel Input Packet Length Validation Flaw https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-80573 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The brief notice announces a newly identified Linux Kernel flaw (CVE‑2026‑80573) and provides a link for further details, but offers no PoC, exploit, activity, patch, or technical specifics.