CVE-2025-38253: HID: wacom: fix crash in wacom_aes_battery_handler()
In the Linux kernel, the following vulnerability has been resolved:
HID: wacom: fix crash in wacomaesbatteryhandler()
Commit fd2a9b29dc9c ("HID: wacom: Remove AES powersupply after extended inactivity") introduced wacomaesbatteryhandler() which is scheduled as a delayed work (aesbatterywork).
In wacomremove(), aesbatterywork is not canceled. Consequently, if the device is removed while aesbatterywork is still pending, then hard crashes or "Oops: general protection fault..." are experienced when wacomaesbatteryhandler() is finally called. E.g., this happens with built-in USB devices after resume from hibernate when aesbatterywork was still pending at the time of hibernation.
So, take care to cancel aesbatterywork in wacomremove().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In HID wacom, update wacom_remove() to cancel the delayed work item aes_battery_work so wacom_aes_battery_handler() cannot run after the device is removed (preventing crashes/Oops when work is still pending across hibernate/resume).
Linux kernel (HID: wacom) cancel delayed work aes_battery_work in wacom_remove() = cancel aes_battery_work in wacom_remove()
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38253?
CVE-2025-38253 is classified as a medium severity vulnerability due to potential system crashes.
How do I fix CVE-2025-38253?
Fix CVE-2025-38253 by applying the latest kernel updates that resolve the issue in the wacom_aes_battery_handler.
What systems are affected by CVE-2025-38253?
CVE-2025-38253 affects the Wacom driver implementation in the Linux kernel.
What is the impact of CVE-2025-38253?
The impact of CVE-2025-38253 includes unexpected crashes when handling battery events in Wacom devices.
When was CVE-2025-38253 disclosed?
CVE-2025-38253 was disclosed along with a commit that addressed the vulnerability in the Linux kernel.