CVE-2025-38494

HighCVSS 7.8/10Last modified Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: core: do not bypass hid_hw_raw_request

hid_hw_raw_request() is actually useful to ensure the provided buffer and length are valid. Directly calling in the low level transport driver function bypassed those checks and allowed invalid paramto be used.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
LinuxLinux>= 4fa5a7f76cc7b6ac87f57741edd2b124851d119f, < dd8e8314f2ce225dade5248dcfb9e2ac0edda624; >= 4fa5a7f76cc7b6ac87f57741edd2b124851d119f, < 40e25aa7e4e0f2440c73a683ee448e41c7c344ed; >= 4fa5a7f76cc7b6ac87f57741edd2b124851d119f, < f10923b8d32a473b229477b63f23bbd72b1e9910; >= 4fa5a7f76cc7b6ac87f57741edd2b124851d119f, < a62a895edb2bfebffa865b5129a66e3b4287f34f; >= 4fa5a7f76cc7b6ac87f57741edd2b124851d119f, < 0e5017d84d650ca0eeaf4a3fe9264c5dbc886b81; >= 4fa5a7f76cc7b6ac87f57741edd2b124851d119f, < d18f63e848840100dbc351a82e7042eac5a28cf5; >= 4fa5a7f76cc7b6ac87f57741edd2b124851d119f, < 19d1314d46c0d8a5c08ab53ddeb62280c77698c0; >= 4fa5a7f76cc7b6ac87f57741edd2b124851d119f, < c2ca42f190b6714d6c481dfd3d9b62ea091c946b
LinuxLinux3.15

References

Timeline

Published
Jul 28, 2025
Last modified
Jul 30, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-384955.5In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved CVE-2025-384965.5In the Linux kernel, the following vulnerability has been resolved: dm-bufio: fix sched in atomic context If "try_verify_in_tasklet" is seCVE-2025-384977.1In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Fix OOB read on empty string write When writingCVE-2025-384985.5In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not ours mounts EnsurCVE-2025-384995.5In the Linux kernel, the following vulnerability has been resolved: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the rigCVE-2025-38502.7A vulnerability, which was classified as problematic, has been found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This issue affects some unknoCVE-2025-385007.8In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collect_md xfrm inteCVE-2025-385017.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: limit repeated connections from clients with the same IP RepeatCVE-2025-385027.1In the Linux kernel, the following vulnerability has been resolved: bpf: Fix oob access in cgroup local storage Lonial reported that an ouCVE-2025-385035.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix assertion when building free space tree When building the fCVE-2025-385045.5In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix pp destruction warnings With multiple page pools anCVE-2025-385055.5In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: discard erroneous disassoc frames on STA interface When
CVE-2025-38494: High severity, CVSS 7.8 | Vulnix