In the Linux kernel, the following vulnerability has been resolved:
HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()
A malicious HID device can trigger a slab out-of-bounds during mt_report_fixup() by passing in report descriptor smaller than 607 bytes. mt_report_fixup() attempts to patch byte offset 607 of the descriptor with 0x25 by first checking if byte offset 607 is 0x15 however it lacks bounds checks to verify if the descriptor is big enough before conducting this check. Fix this bug by ensuring the descriptor size is at least 608 bytes before accessing it.
Below is the KASAN splat after the out of bounds access happens:
[ 13.671954] ================================================================== [ 13.672667] BUG: KASAN: slab-out-of-bounds in mt_report_fixup+0x103/0x110 [ 13.673297] Read of size 1 at addr ffff888103df39df by task kworker/0:1/10 [ 13.673297] [ 13.673297] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.15.0-00005-gec5d573d83f4-dirty #3 [ 13.673297] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/04 [ 13.673297] Call Trace: [ 13.673297] <TASK> [ 13.673297] dump_stack_lvl+0x5f/0x80 [ 13.673297] print_report+0xd1/0x660 [ 13.673297] kasan_report+0xe5/0x120 [ 13.673297] __asan_report_load1_noabort+0x18/0x20 [ 13.673297] mt_report_fixup+0x103/0x110 [ 13.673297] hid_open_report+0x1ef/0x810 [ 13.673297] mt_probe+0x422/0x960 [ 13.673297] hid_device_probe+0x2e2/0x6f0 [ 13.673297] really_probe+0x1c6/0x6b0 [ 13.673297] __driver_probe_device+0x24f/0x310 [ 13.673297] driver_probe_device+0x4e/0x220 [ 13.673297] __device_attach_driver+0x169/0x320 [ 13.673297] bus_for_each_drv+0x11d/0x1b0 [ 13.673297] __device_attach+0x1b8/0x3e0 [ 13.673297] device_initial_probe+0x12/0x20 [ 13.673297] bus_probe_device+0x13d/0x180 [ 13.673297] device_add+0xe3a/0x1670 [ 13.673297] hid_add_device+0x31d/0xa40 [...]
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-uki-virtUpgrade kernel-docUpgrade kernel-rt-64k-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-rt-64k-modules-extraUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-rt-64kUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade perfUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-64k-modulesUpgrade libperfUpgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-devel-matchedUpgrade rtlaUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-rt-64k-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernelUpgrade kernel-toolsUpgrade kernel-64kUpgrade kernel-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade rvUpgrade kernel-64k-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-modulesUpgrade kernel-64k-develUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-coreUpgrade kernel-64k-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-64k-modules-core | Jan 20, 2026 | Jan 12, 2026 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.191-132.213Upgrade kernelUpgrade python-perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade perfUpgrade kernel-libbpf-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel6.12-develUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel-develUpgrade kernel-modules-extraUpgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.12-headersUpgrade kernel6.12Upgrade perf6.12Upgrade kernel6.12-libbpf-staticUpgrade kernelUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel6.12-tools-develUpgrade kernel6.12-libbpfUpgrade python3-perf6.12-debuginfoUpgrade bpftool-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool6.12Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.150-174.273Upgrade kernel6.12-modules-extra-commonUpgrade kernel-livepatch-6.12.46-66.121Upgrade bpftool6.12-debuginfoUpgrade kernel-modules-extra-common | Sep 30, 2025 | Sep 16, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 11, 2025 | Sep 16, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jan 9, 2026 | Sep 16, 2025 |
| Rocky_linux | — | Upgrade kernel-modulesUpgrade perf-debuginfoUpgrade rtlaUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-devel-matchedUpgrade libperfUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdumpUpgrade perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virtUpgrade kernel-debug-modules-coreUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-debuginfoUpgrade kernel-modules-coreUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade rvUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-uki-virt-addonsUpgrade libperf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-zfcpdump-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-devel-matched | Jan 19, 2026 | Jan 17, 2026 |
| Suse | — | Upgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade kernel-azure-optionalUpgrade kernel-sourceUpgrade dtb-mediatekUpgrade kernel-rtUpgrade dtb-amazonUpgrade dtb-apmUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-rt-develUpgrade kernel-source-azureUpgrade kernel-source-rtUpgrade cluster-md-kmp-rtUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-default-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade dtb-freescaleUpgrade kernel-azure-vdsoUpgrade kernel-default-optionalUpgrade dtb-lgUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade kernel-devel-rtUpgrade kernel-rt-vdsoUpgrade dtb-alteraUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade dtb-broadcomUpgrade kernel-obs-buildUpgrade dtb-marvellUpgrade kernel-rt-optionalUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade dtb-xilinxUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-syms-rtUpgrade dtb-renesasUpgrade dtb-socionextUpgrade dtb-allwinnerUpgrade kernel-debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade dtb-sprdUpgrade kselftests-kmp-defaultUpgrade kernel-debug-develUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-hisiliconUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-gcpUpgrade linux-image-gke-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-awsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-realtime-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-raspiUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gke-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-xilinxUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-intelUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-oracleUpgrade linux-image-kvm-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-virtualUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-generic-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-163-genericUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-aws-64kUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegraUpgrade linux-image-generic-64k-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-genericUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1029-xilinx | Dec 5, 2025 | Sep 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Sep 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub