https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 01:16:06 +0000 https://vulnerability.circl.lu/vuln/cve-2025-38103 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()</p> <p>Update struct hid_descriptor to better reflect the mandatory and optional parts of the HID Descriptor as per USB HID 1.11 specification. Note: the kernel currently does not parse any optional HID class descriptors, only the mandatory report descriptor.</p> <p>Update all references to member element desc[0] to rpt_desc.</p> <p>Add test to verify bLength and bNumDescriptors values are valid.</p> <p>Replace the for loop with direct access to the mandatory HID class descriptor member for the report descriptor. This eliminates the possibility of getting an out-of-bounds fault.</p> <p>Add a warning message if the HID descriptor contains any unsupported optional HID class descriptors.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()</p> <p>Update struct hid_descriptor to better reflect the mandatory and optional parts of the HID Descriptor as per USB HID 1.11 specification. Note: the kernel currently does not parse any optional HID class descriptors, only the mandatory report descriptor.</p> <p>Update all references to member element desc[0] to rpt_desc.</p> <p>Add test to verify bLength and bNumDescriptors values are valid.</p> <p>Replace the for loop with direct access to the mandatory HID class descriptor member for the report descriptor. This eliminates the possibility of getting an out-of-bounds fault.</p> <p>Add a warning message if the HID descriptor contains any unsupported optional HID class descriptors.</p> https://vulnerability.circl.lu/vuln/cve-2025-38103