CVE-2025-38103

HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()

published July 3, 2025

CVSS
—
EPSS
0%
Percentile
10.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()

Update struct hid_descriptor to better reflect the mandatory and

optional parts of the HID Descriptor as per USB HID 1.11 specification.

Note: the kernel currently does not parse any optional HID class

descriptors, only the mandatory report descriptor.

Update all references to member element desc[0] to rpt_desc.

Add test to verify bLength and bNumDescriptors values are valid.

Replace the for loop with direct access to the mandatory HID class

descriptor member for the report descriptor. This eliminates the

possibility of getting an out-of-bounds fault.

Add a warning message if the HID descriptor contains any unsupported

optional HID class descriptors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00212 · 10.9th percentile
Published
2025-07-03T08:35Z
EPSS history
Timeline
  • 03 JUL 08:35Z
    HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
    cvelistv5