IT

Tracker / CVE-2025-38103

CVE-2025-38103

High 7.1

In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() Update struct hid_descriptor to better reflect the mandatory and optional parts of the HID Descriptor as per USB HID 1.11 specification. Note: the kernel currently does not parse any optional HID class descriptors, only the mandatory report descriptor. Update all references to member element desc[0] to rpt_desc. Add test to verify bLength and bNumDescriptors values are valid. Replace the for loop with direct access to the mandatory HID class descriptor member for the report descriptor. This eliminates the possibility of getting an out-of-bounds fault. Add a warning message if the HID descriptor contains any unsupported optional HID class descriptors.

Affected products and versions

debian debian_linux
linux linux_kernel
linux linux_kernel · 3.16.50 → 3.17
linux linux_kernel · 3.18.76 → 3.19
linux linux_kernel · 3.2.95 → 3.3
linux linux_kernel · 4.1.46 → 4.2
linux linux_kernel · 4.13.8 → 4.14
linux linux_kernel · 4.14.1 → 5.4.295
linux linux_kernel · 4.4.93 → 4.5
linux linux_kernel · 4.9.57 → 4.10
linux linux_kernel · 5.11 → 5.15.186
linux linux_kernel · 5.16 → 6.1.142
linux linux_kernel · 5.5 → 5.10.239
linux linux_kernel · 6.13 → 6.15.3
linux linux_kernel · 6.2 → 6.6.94
linux linux_kernel · 6.7 → 6.12.34

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References