Re: [RESEND 1/1] HID: wacom: Fix OOB write in wacom_hid_set_device_mode()

[Benjamin Tissoires]

On Wed, 27 May 2026 17:05:26 +0100, Lee Jones wrote:
> wacom_hid_set_device_mode() currently assumes that the HID_DG_INPUTMODE
> usage is always located in the first field (field[0]) of the feature report.
> However, a device can specify HID_DG_INPUTMODE in a different field.
> 
> If HID_DG_INPUTMODE is in a field other than the first one and the first
> field has a report_count smaller than the usage_index of HID_DG_INPUTMODE,
> this leads to an out-of-bounds write to r->field[0]->value.
> 
> [...]

Applied to https://git.kernel.org/pub/scm/linux/kernel/git/hid/hid.git (for-7.1/upstream-fixes), thanks!

[1/1] HID: wacom: Fix OOB write in wacom_hid_set_device_mode()
      https://git.kernel.org/hid/hid/c/c0a8899e02dd

Cheers,
-- 
Benjamin Tissoires <bentiss@xxxxxxxxxx>