An out-of-bounds write vulnerability in the Linux kernel Wacom HID driver could allow an adjacent attacker to trigger memory corruption and potentially achieve arbitrary code execution.

The function wacom_hid_set_device_mode incorrectly assumes the HID_DG_INPUTMODE usage is always in the first field of the feature report. This lack of validation allows an adjacent attacker to force an out-of-bounds write.

The CVSS score of 8.8 underscores the critical nature of this memory corruption flaw. Successful exploitation can lead to system-wide compromise, as memory corruption in the kernel often facilitates privilege escalation or arbitrary code execution.

Immediate Action: Update the Linux kernel to 5.10.259, 5.15.210, 6.1.176, 6.6.143, or newer stable versions.

Proactive Monitoring: Review system logs for hardware initialization errors or crashes associated with HID input devices.

Compensating Controls: Restrict physical access to USB ports and prevent the connection of unauthorized HID devices in high-security environments.

Public Exploit Available: No (exploit_available: false)

This vulnerability represents a significant risk to systems using Wacom input devices. Administrators should ensure that kernel patches are applied promptly to mitigate the risk of memory corruption and potential system compromise.