CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID
HID: core: ensure the allocated report buffer can contain the reserved report ID
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38495?
CVE-2025-38495 has been classified with a moderate severity level due to its potential impact on the Linux kernel's HID subsystem.
How do I fix CVE-2025-38495?
To fix CVE-2025-38495, users should update to the latest version of the Linux kernel where the vulnerability has been patched.
What systems are affected by CVE-2025-38495?
CVE-2025-38495 affects systems running the vulnerable versions of the Linux kernel that involve HID transport drivers.
Who is responsible for addressing CVE-2025-38495?
The Linux kernel maintainers are responsible for addressing CVE-2025-38495 through timely updates and patches.
What are the potential consequences of CVE-2025-38495?
The potential consequences of CVE-2025-38495 include improper handling of HID report data, which could lead to unexpected behavior in devices relying on the kernel.