CVE-2026-31624

A flaw was found in the Linux kernel's Human Interface Device (HID) core. A malicious or malformed HID device could provide a specially crafted report descriptor with an overly large report_size value. This could lead to an undefined shift operation within the s32ton() function when processing output reports. This vulnerability may result in system instability or a denial of service (DoS).

HID s32ton() now clamps report_size so pathological descriptors cannot provoke undefined left-shift behavior. Red Hat treats this as local USB/HID attack surface hardening. Core HID is not practically unloadable; patch kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.