In wacom_hid_set_device_mode of drivers/hid/wacom_sys.c, there is a possible OOB write due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.