In the Linux kernel, the following vulnerability has been resolved:
HID: core: ensure the allocated report buffer can contain the reserved report ID
When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, currently the allocated buffer not account for that extra byte, meaning that instead of having 8 guaranteed bytes for implement to be working, we only have 7.
[
{
"digest": {
"length": 123.0,
"function_hash": "4291090535886604445245422697862989819"
},
"target": {
"file": "drivers/hid/hid-core.c",
"function": "hid_alloc_report_buf"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a47d9d9895bad9ce0e840a39836f19ca0b2a343a",
"id": "CVE-2025-38495-1f02f62b",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 123.0,
"function_hash": "4291090535886604445245422697862989819"
},
"target": {
"file": "drivers/hid/hid-core.c",
"function": "hid_alloc_report_buf"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a262370f385e53ff7470efdcdaf40468e5756717",
"id": "CVE-2025-38495-28f3a529",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 123.0,
"function_hash": "4291090535886604445245422697862989819"
},
"target": {
"file": "drivers/hid/hid-core.c",
"function": "hid_alloc_report_buf"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4f15ee98304b96e164ff2340e1dfd6181c3f42aa",
"id": "CVE-2025-38495-3dd8c0e4",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"67000762479622901114976315739331706431",
"102600397541443439051986344428866172550",
"2096280999345259511703305842189558551",
"336789925549759748655862680446915092689"
],
"threshold": 0.9
},
"target": {
"file": "drivers/hid/hid-core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a262370f385e53ff7470efdcdaf40468e5756717",
"id": "CVE-2025-38495-42b0afc9",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"67000762479622901114976315739331706431",
"102600397541443439051986344428866172550",
"2096280999345259511703305842189558551",
"336789925549759748655862680446915092689"
],
"threshold": 0.9
},
"target": {
"file": "drivers/hid/hid-core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a47d9d9895bad9ce0e840a39836f19ca0b2a343a",
"id": "CVE-2025-38495-55948146",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"67000762479622901114976315739331706431",
"102600397541443439051986344428866172550",
"2096280999345259511703305842189558551",
"336789925549759748655862680446915092689"
],
"threshold": 0.9
},
"target": {
"file": "drivers/hid/hid-core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f2892f7233a8f1320fe671d0f95f122191bfbcd",
"id": "CVE-2025-38495-5701bd4f",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"67000762479622901114976315739331706431",
"102600397541443439051986344428866172550",
"2096280999345259511703305842189558551",
"336789925549759748655862680446915092689"
],
"threshold": 0.9
},
"target": {
"file": "drivers/hid/hid-core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4f15ee98304b96e164ff2340e1dfd6181c3f42aa",
"id": "CVE-2025-38495-63226b92",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"length": 123.0,
"function_hash": "4291090535886604445245422697862989819"
},
"target": {
"file": "drivers/hid/hid-core.c",
"function": "hid_alloc_report_buf"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d3ed1d84a84538a39b3eb2055d6a97a936c108f2",
"id": "CVE-2025-38495-679c786c",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 123.0,
"function_hash": "4291090535886604445245422697862989819"
},
"target": {
"file": "drivers/hid/hid-core.c",
"function": "hid_alloc_report_buf"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f2892f7233a8f1320fe671d0f95f122191bfbcd",
"id": "CVE-2025-38495-7b53f960",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"67000762479622901114976315739331706431",
"102600397541443439051986344428866172550",
"2096280999345259511703305842189558551",
"336789925549759748655862680446915092689"
],
"threshold": 0.9
},
"target": {
"file": "drivers/hid/hid-core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d3ed1d84a84538a39b3eb2055d6a97a936c108f2",
"id": "CVE-2025-38495-976242ed",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"67000762479622901114976315739331706431",
"102600397541443439051986344428866172550",
"2096280999345259511703305842189558551",
"336789925549759748655862680446915092689"
],
"threshold": 0.9
},
"target": {
"file": "drivers/hid/hid-core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7fa83d0043370003e9a0b46ab7ae8f53b00fab06",
"id": "CVE-2025-38495-b035839a",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"length": 123.0,
"function_hash": "4291090535886604445245422697862989819"
},
"target": {
"file": "drivers/hid/hid-core.c",
"function": "hid_alloc_report_buf"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7228e36c7875e4b035374cf68ca5e44dffa596b2",
"id": "CVE-2025-38495-b2ca822f",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"67000762479622901114976315739331706431",
"102600397541443439051986344428866172550",
"2096280999345259511703305842189558551",
"336789925549759748655862680446915092689"
],
"threshold": 0.9
},
"target": {
"file": "drivers/hid/hid-core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7228e36c7875e4b035374cf68ca5e44dffa596b2",
"id": "CVE-2025-38495-b87f97cd",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"length": 123.0,
"function_hash": "4291090535886604445245422697862989819"
},
"target": {
"file": "drivers/hid/hid-core.c",
"function": "hid_alloc_report_buf"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7fa83d0043370003e9a0b46ab7ae8f53b00fab06",
"id": "CVE-2025-38495-d4c761af",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
}
]