CVE-2025-38495

HID: core: ensure the allocated report buffer can contain the reserved report ID

published July 28, 2025

CVSS
—
EPSS
0%
Percentile
27.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

HID: core: ensure the allocated report buffer can contain the reserved report ID

When the report ID is not used, the low level transport drivers expect

the first byte to be 0. However, currently the allocated buffer not

account for that extra byte, meaning that instead of having 8 guaranteed

bytes for implement to be working, we only have 7.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00349 · 27.3th percentile
Published
2025-07-28T11:22Z
EPSS history
Timeline
  • 28 JUL 11:22Z
    HID: core: ensure the allocated report buffer can contain the reserved report ID
    cvelistv5