Unrated severityNVD Advisory· Published Jul 28, 2025· Updated Jan 2, 2026
HID: core: do not bypass hid_hw_raw_request
CVE-2025-38494
Description
In the Linux kernel, the following vulnerability has been resolved:
HID: core: do not bypass hid_hw_raw_request
hid_hw_raw_request() is actually useful to ensure the provided buffer and length are valid. Directly calling in the low level transport driver function bypassed those checks and allowed invalid paramto be used.
Affected products
2- Linux/Linuxv5Range: 3.15
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- git.kernel.org/stable/c/0e5017d84d650ca0eeaf4a3fe9264c5dbc886b81mitre
- git.kernel.org/stable/c/19d1314d46c0d8a5c08ab53ddeb62280c77698c0mitre
- git.kernel.org/stable/c/40e25aa7e4e0f2440c73a683ee448e41c7c344edmitre
- git.kernel.org/stable/c/a62a895edb2bfebffa865b5129a66e3b4287f34fmitre
- git.kernel.org/stable/c/c2ca42f190b6714d6c481dfd3d9b62ea091c946bmitre
- git.kernel.org/stable/c/d18f63e848840100dbc351a82e7042eac5a28cf5mitre
- git.kernel.org/stable/c/dd8e8314f2ce225dade5248dcfb9e2ac0edda624mitre
- git.kernel.org/stable/c/f10923b8d32a473b229477b63f23bbd72b1e9910mitre
News mentions
0No linked articles in our index yet.