In the Linux kernel, the following vulnerability has been resolved:
HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report()
`i2c_hid_xfer` is used to read `recv_len + sizeof(__le16)` bytes of data into `ihid->rawbuf`.
The former can come from the userspace in the hidraw driver and is only bounded by HID_MAX_BUFFER_SIZE(16384) by default (unless we also set `max_buffer_size` field of `struct hid_ll_driver` which we do not).
The latter has size determined at runtime by the maximum size of different report types you could receive on any particular device and can be a much smaller value.
Fix this by truncating `recv_len` to `ihid->bufsize - sizeof(__le16)`.
The impact is low since access to hidraw devices requires root.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Mar 16, 2026 | Mar 16, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Mar 25, 2026 | Feb 14, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Feb 14, 2026 |
| Ubuntu | — | Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1055-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1059-azureUpgrade linux-image-gcp-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-6.8.0-1056-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-6.8.0-1058-gcp-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-6.8.0-116-fipsUpgrade linux-image-generic-64kUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-aws-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-117-genericUpgrade linux-image-xilinxUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-6.8 | May 25, 2026 | May 19, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 14, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub