Към съдържанието
Търсене

CVE-2026-31624: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: HID: core: clamp report_size in s32ton() to avoid undefined shift s32ton() shifts by n-1 where n is the field's report_size, a value that comes directly from a HID device. The HID parser bounds report_size only to <= 256, so a broken HID device can supply a report descriptor with a wide field that triggers shift exponents up to 256 on a 32-bit type when an output report is built via hid_output_field() or hid_set_field(). Commit ec61b41918587 ("HID: core: fix shift-out-of-bounds in hid_report_raw_event") added the same n > 32 clamp to the function snto32(), but s32ton() was never given the same fix as I guess syzbot hadn't figured out how to fuzz a device the same way. Fix this up by just clamping the max value of n, just like snto32() does.

    Засегнати продукти

    • Linux Linux: dde5845a529ff753364a6d1aea61180946270bfa преди 76ad02854a30c394e0c076e6e6bed0a388573a94; dde5845a529ff753364a6d1aea61180946270bfa преди eb415ddaf25e09ddb8fe5736a70c9de2e6462534; dde5845a529ff753364a6d1aea61180946270bfa преди 0ab048dbdb1daacf17d52e9252297eb6e1298e49; dde5845a529ff753364a6d1aea61180946270bfa преди 932ae5309e53561197aa7d1606c7cf63af10e24f; dde5845a529ff753364a6d1aea61180946270bfa преди 58386f00af710922cafb0fb69211497beddfaa95; dde5845a529ff753364a6d1aea61180946270bfa преди 8a8333237f1f5caab8d4c3d2c2e7578c4263a97f; dde5845a529ff753364a6d1aea61180946270bfa преди ea363a34086ddb4231adc581a7f36c39ec154bfc; dde5845a529ff753364a6d1aea61180946270bfa преди 97014719bb8fccb1ffcbbc299e84b1f11b114195; dde5845a529ff753364a6d1aea61180946270bfa преди 69c02ffde6ed4d535fa4e693a9e572729cad3d0d
    • Linux Linux: 2.6.20; преди 2.6.20; 5.10.258 до 5.10.*; 5.15.209 до 5.15.*; 6.1.175 до 6.1.*; 6.6.136 до 6.6.*; 6.12.83 до 6.12.*; 6.18.24 до 6.18.*; 6.19.14 до 6.19.*; 7.0.1 до 7.0.*; от 7.1 нататък
    • Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem: всички версии

    История

    • 24 април 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-31624: Linux | freedomonline.bg