CVE-2025-38494

Published Jul 28, 2025

Last updated 4 days ago

Linux Kernel

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-38494 refers to a vulnerability found in the Linux kernel. Specifically, the vulnerability lies in the HID (Human Interface Devices) core. The issue stems from the fact that the `hid_hw_raw_request()` function was being bypassed, which is important for validating the buffer and length of requests. By directly calling the low-level transport driver function, these checks were circumvented, potentially allowing invalid parameters to be used.

Description: In the Linux kernel, the following vulnerability has been resolved: HID: core: do not bypass hid_hw_raw_request hid_hw_raw_request() is actually useful to ensure the provided buffer and length are valid. Directly calling in the low level transport driver function bypassed those checks and allowed invalid paramto be used.
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
NVD status: Modified
Products: linux_kernel, debian_linux

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "6D7384E1-E9E8-41E0-AF24-1571E21AC42F",
            "versionEndExcluding": "5.4.297",
            "versionStartIncluding": "3.15",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "D0D21C35-EB8A-488A-BBF9-403E4817E5DD",
            "versionEndExcluding": "5.10.241",
            "versionStartIncluding": "5.5",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "AD9E597F-3DDE-4D7E-976C-463D0611F13F",
            "versionEndExcluding": "5.15.190",
            "versionStartIncluding": "5.11",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "A4FD62FC-0DAE-4ACE-8C9C-66156518C3E1",
            "versionEndExcluding": "6.1.147",
            "versionStartIncluding": "5.16",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "094B81E0-B756-4727-85CA-F3F8D1C9D116",
            "versionEndExcluding": "6.6.100",
            "versionStartIncluding": "6.2",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "0099D5A4-B157-4D36-8858-982C7D579030",
            "versionEndExcluding": "6.12.40",
            "versionStartIncluding": "6.7",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "C7AFE5B0-F3B1-4D30-B8BF-EDA0385C4746",
            "versionEndExcluding": "6.15.8",
            "versionStartIncluding": "6.13",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*",
            "matchCriteriaId": "6D4894DB-CCFE-4602-B1BF-3960B2E19A01",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*",
            "matchCriteriaId": "09709862-E348-4378-8632-5A7813EDDC86",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:*",
            "matchCriteriaId": "415BF58A-8197-43F5-B3D7-D1D63057A26E",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc4:*:*:*:*:*:*",
            "matchCriteriaId": "A0517869-312D-4429-80C2-561086E1421C",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc5:*:*:*:*:*:*",
            "matchCriteriaId": "85421F4E-C863-4ABF-B4B4-E887CC2F7F92",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.16:rc6:*:*:*:*:*:*",
            "matchCriteriaId": "3827F0D4-5FEE-4181-B267-5A45E7CA11FC",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.