CVE-2026-97538

A flaw was found in the Linux kernel's ASUS ROG RYUJIN hardware monitoring driver. The driver fails to validate the length of incoming Human Interface Device (HID) reports before parsing response headers and data fields. An attacker capable of supplying truncated HID reports can cause the driver to consume uninitialized memory from the transport buffer and expose it through the sysfs interface. This issue leads to local information disclosure of uninitialized kernel memory.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.