CVE-2025-39824: HID: asus: fix UAF via HID_CLAIMED_INPUT validation
HID: asus: fix UAF via HIDCLAIMEDINPUT validation
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch HID: asus: fix UAF via HID_CLAIMED_INPUT validation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39824?
CVE-2025-39824 is currently categorized with a moderate severity rating due to the potential for a use-after-free vulnerability.
How do I fix CVE-2025-39824?
To fix CVE-2025-39824, users should update their Linux kernel to the latest patched version that includes the necessary security fixes.
Which software is affected by CVE-2025-39824?
CVE-2025-39824 affects the Linux kernel and ASUS ROG N-Key keyboard.
What type of vulnerability is CVE-2025-39824?
CVE-2025-39824 is a use-after-free (UAF) vulnerability related to the HID subsystem in the Linux kernel.
How can CVE-2025-39824 impact users?
CVE-2025-39824 may allow attackers to exploit memory management issues, potentially leading to system instability or unauthorized access.