CVE-2026-31401: HID: bpf: prevent buffer overflow in hid_hw_request

Published Apr 3, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

HID: bpf: prevent buffer overflow in hidhwrequest

right now the returned value is considered to be always valid. However, when playing with HID-BPF, the return value can be arbitrary big, because it's the return value of dispatchhidbpfrawrequests(), which calls the structops and we have no guarantees that the value makes sense.

Affected Software

8 affected components
Linux Linux kernel
Linux Linux kernel>=6.11<6.12.78
Linux Linux kernel>=6.13<6.18.20
Linux Linux kernel>=6.19<6.19.10
Linux Linux kernel=7.0-rc1
Linux Linux kernel=7.0-rc2
Linux Linux kernel=7.0-rc3
Linux Linux kernel=7.0-rc4

Event History

Apr 3, 2026
CVE Published
via MITRE·03:16 PM
Data Sourced
via MITRE·03:16 PM
DescriptionSeverity
Data Sourced
via NVD·04:16 PM
RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2026-31401?

CVE-2026-31401 is classified as a high-severity vulnerability due to its potential for buffer overflow exploitation.

2

How do I fix CVE-2026-31401?

To fix CVE-2026-31401, ensure that you update your Linux kernel to the latest stable version that includes the patch.

3

What software is affected by CVE-2026-31401?

CVE-2026-31401 affects the Linux kernel, particularly the portions related to HID-BPF functionality.

4

What type of vulnerability is CVE-2026-31401?

CVE-2026-31401 is a buffer overflow vulnerability that can arise during HID hardware requests.

5

Can CVE-2026-31401 be exploited remotely?

Yes, CVE-2026-31401 could potentially be exploited remotely if an attacker can interact with the affected HID devices.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203