n the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton() against conversion to 0 bits Testing by the syzbot fuzzer showed that the HID core gets a shift-out-of-bounds exception when it tries to convert a 32-bit quantity to a 0-bit quantity. Ideally this should never occur, but there are buggy devices and some might have a report field with size set to zero; we shouldn't reject the report or the device just because of that. Instead, harden the s32ton() routine so that it returns a reasonable result instead of crashing when it is called with the number of bits set to 0 -- the same as what snto32() does.
Configuration 1 (hide)
|
19 Jan 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
06 Dec 2025, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
18 Nov 2025, 17:59
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| CWE | CWE-125 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.1 |
| References | () https://git.kernel.org/stable/c/865ad8469fa24de1559f247d9426ab01e5ce3a56 - Patch | |
| References | () https://git.kernel.org/stable/c/8b4a94b1510f6a46ec48494b52ee8f67eb4fc836 - Patch | |
| References | () https://git.kernel.org/stable/c/a6b87bfc2ab5bccb7ad953693c85d9062aef3fdd - Patch | |
| References | () https://git.kernel.org/stable/c/d3b504146c111548ab60b6ef7aad00bfb1db05a2 - Patch | |
| First Time |
Linux linux Kernel
Linux |
09 Sep 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Published : 2025-08-19 17:15
Updated : 2026-01-19 13:16
NVD link : CVE-2025-38556
Mitre link : CVE-2025-38556
CVE.ORG link : CVE-2025-38556
JSON object : View
Out-of-bounds Read