Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-38494

HID: core: do not bypass hid_hw_raw_request

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: HID: core: do not bypass hid_hw_raw_request hid_hw_raw_request() is actually useful to ensure the provided buffer and length are valid. Directly calling in the low level transport driver function bypassed those checks and allowed invalid paramto be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 4fa5a7f76cc7b6ac87f57741edd2b124851d119f to < dd8e8314f2ce225dade5248dcfb9e2ac0edda624affected
  • 4fa5a7f76cc7b6ac87f57741edd2b124851d119f to < 40e25aa7e4e0f2440c73a683ee448e41c7c344edaffected
  • 4fa5a7f76cc7b6ac87f57741edd2b124851d119f to < f10923b8d32a473b229477b63f23bbd72b1e9910affected
  • 4fa5a7f76cc7b6ac87f57741edd2b124851d119f to < a62a895edb2bfebffa865b5129a66e3b4287f34faffected
  • 4fa5a7f76cc7b6ac87f57741edd2b124851d119f to < 0e5017d84d650ca0eeaf4a3fe9264c5dbc886b81affected
  • 4fa5a7f76cc7b6ac87f57741edd2b124851d119f to < d18f63e848840100dbc351a82e7042eac5a28cf5affected
  • 4fa5a7f76cc7b6ac87f57741edd2b124851d119f to < 19d1314d46c0d8a5c08ab53ddeb62280c77698c0affected
  • 4fa5a7f76cc7b6ac87f57741edd2b124851d119f to < c2ca42f190b6714d6c481dfd3d9b62ea091c946baffected

Linux Linux

Default version status: affected

  • 3.15affected
  • 0 to < 3.15unaffected
  • 5.4.297 to ≤ 5.4.*unaffected
  • 5.10.241 to ≤ 5.10.*unaffected
  • 5.15.190 to ≤ 5.15.*unaffected
  • 6.1.147 to ≤ 6.1.*unaffected
  • 6.6.100 to ≤ 6.6.*unaffected
  • 6.12.40 to ≤ 6.12.*unaffected
  • 6.15.8 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References