Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-38495

HID: core: ensure the allocated report buffer can contain the reserved report ID

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, currently the allocated buffer not account for that extra byte, meaning that instead of having 8 guaranteed bytes for implement to be working, we only have 7.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 4fa5a7f76cc7b6ac87f57741edd2b124851d119f to < 7228e36c7875e4b035374cf68ca5e44dffa596b2affected
  • 4fa5a7f76cc7b6ac87f57741edd2b124851d119f to < 9f2892f7233a8f1320fe671d0f95f122191bfbcdaffected
  • 4fa5a7f76cc7b6ac87f57741edd2b124851d119f to < 7fa83d0043370003e9a0b46ab7ae8f53b00fab06affected
  • 4fa5a7f76cc7b6ac87f57741edd2b124851d119f to < d3ed1d84a84538a39b3eb2055d6a97a936c108f2affected
  • 4fa5a7f76cc7b6ac87f57741edd2b124851d119f to < fcda39a9c5b834346088c14b1374336b079466c1affected
  • 4fa5a7f76cc7b6ac87f57741edd2b124851d119f to < a262370f385e53ff7470efdcdaf40468e5756717affected
  • 4fa5a7f76cc7b6ac87f57741edd2b124851d119f to < a47d9d9895bad9ce0e840a39836f19ca0b2a343aaffected
  • 4fa5a7f76cc7b6ac87f57741edd2b124851d119f to < 4f15ee98304b96e164ff2340e1dfd6181c3f42aaaffected

Linux Linux

Default version status: affected

  • 3.15affected
  • 0 to < 3.15unaffected
  • 5.4.297 to ≤ 5.4.*unaffected
  • 5.10.241 to ≤ 5.10.*unaffected
  • 5.15.190 to ≤ 5.15.*unaffected
  • 6.1.147 to ≤ 6.1.*unaffected
  • 6.6.100 to ≤ 6.6.*unaffected
  • 6.12.40 to ≤ 6.12.*unaffected
  • 6.15.8 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References