CVE-2025-38495

In the Linux kernel, the following vulnerability has been resolved:

HID: core: ensure the allocated report buffer can contain the reserved report ID

When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, currently the allocated buffer not account for that extra byte, meaning that instead of having 8 guaranteed bytes for implement to be working, we only have 7.

This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because exploitation requires local access, such as attaching a malicious physical or virtualized input device, or having elevated privileges to interact with low-level HID interfaces. In typical enterprise deployments, an undersized allocation when handling report structures without an explicit report identifier can result in out-of-bounds kernel memory access. This condition primarily leads to a local system crash causing a denial of service, while remote network exploitation is not possible.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.