Buffer Overflow in Linux Kernel due to Insufficient Report Buffer Allocation

CVE-2025-38495

What is CVE-2025-38495?

A vulnerability exists in the Linux kernel's HID subsystem, where the allocated report buffer is not appropriately sized to accommodate the reserved report ID. When the report ID is not in use, low-level transport drivers expect the initial byte to be 0. The current implementation fails to account for this extra byte, resulting in a situation where the report buffer guarantees only 7 bytes of usable space instead of the necessary 8 bytes. This flaw can lead to unexpected behavior in drivers that rely on the correct buffer allocation.

References