-

CVE-2025-38495

In the Linux kernel, the following vulnerability has been resolved:

HID: core: ensure the allocated report buffer can contain the reserved report ID

When the report ID is not used, the low level transport drivers expect
the first byte to be 0. However, currently the allocated buffer not
account for that extra byte, meaning that instead of having 8 guaranteed
bytes for implement to be working, we only have 7.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version < 7228e36c7875e4b035374cf68ca5e44dffa596b2
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 9f2892f7233a8f1320fe671d0f95f122191bfbcd
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 7fa83d0043370003e9a0b46ab7ae8f53b00fab06
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < d3ed1d84a84538a39b3eb2055d6a97a936c108f2
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < fcda39a9c5b834346088c14b1374336b079466c1
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < a262370f385e53ff7470efdcdaf40468e5756717
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < a47d9d9895bad9ce0e840a39836f19ca0b2a343a
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 4f15ee98304b96e164ff2340e1dfd6181c3f42aa
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version <= 5.4.*
Version 5.4.297
Status unaffected
Version <= 5.10.*
Version 5.10.241
Status unaffected
Version <= 5.15.*
Version 5.15.190
Status unaffected
Version <= 6.1.*
Version 6.1.147
Status unaffected
Version <= 6.6.*
Version 6.6.100
Status unaffected
Version <= 6.12.*
Version 6.12.40
Status unaffected
Version <= 6.15.*
Version 6.15.8
Status unaffected
Version <= *
Version 6.16
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.103
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String