In the Linux kernel, the following vulnerability has been resolved:
HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
Update struct hid_descriptor to better reflect the mandatory and optional parts of the HID Descriptor as per USB HID 1.11 specification. Note: the kernel currently does not parse any optional HID class descriptors, only the mandatory report descriptor.
Update all references to member element desc[0] to rpt_desc.
Add test to verify bLength and bNumDescriptors values are valid.
Replace the for loop with direct access to the mandatory HID class descriptor member for the report descriptor. This eliminates the possibility of getting an out-of-bounds fault.
Add a warning message if the HID descriptor contains any unsupported optional HID class descriptors.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-livepatch-5.15.186-128.192Upgrade kernel-livepatch-5.10.239-236.958Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade perf6.12Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12Upgrade kernel-debuginfoUpgrade perfUpgrade python3-perf6.12-debuginfoUpgrade kernel-headersUpgrade perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade python3-perf6.12Upgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-livepatch-6.1.144-170.251Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-livepatch-6.12.35-55.103Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-debuginfoUpgrade perf-debuginfoUpgrade kernel-devel | Sep 9, 2025 | Jul 3, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Dec 12, 2025 | Nov 11, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelists | Nov 12, 2025 | Nov 11, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Nov 21, 2025 | Nov 11, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade dtb-amdUpgrade kernel-source-rtUpgrade kernel-develUpgrade dtb-alteraUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade reiserfs-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade kernel-rt-extraUpgrade dtb-mediatekUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade dtb-amazonUpgrade kernel-docs-htmlUpgrade kernel-syms-azureUpgrade kselftests-kmp-defaultUpgrade dtb-freescale | Dec 5, 2025 | Sep 12, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-nvidiaUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-xilinxUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gkeopUpgrade linux-image-oem-6.14Upgrade linux-image-nvidia-tegraUpgrade linux-image-ibmUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-fips-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-22.04bUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-6.14Upgrade linux-image-gke-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-realtimeUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-virtual-6.14Upgrade linux-image-virtual-5.15Upgrade linux-image-realtime-6.14Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-ibm-5.15Upgrade linux-image-generic-64k-6.14Upgrade linux-image-azureUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-realtime-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-kvmUpgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gkeUpgrade linux-image-gcp-6.14Upgrade linux-image-azure-5.15Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-5.15.0-156-fips | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 16, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub