PT-2025-30794 · Pixart+2 · Pixart Hp Usb Optical Mouse+2

Published 2025-06-27 · Updated 2025-07-25 · CVE-2025-38394

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0-rc2-00321-g2aa6621d

Description A use-after-free (UAF) vulnerability exists in the Linux kernel's HID (Human Interface Device) subsystem, specifically within the appletb-kbd driver. The issue occurs when an input handler is initialized and registered with the input core, but a probe failure happens after registration before unregistration. This results in a dangling pointer to freed memory within the input handler list. Subsequent input device registrations can then trigger memory corruption when traversing this list and calling input attach handler(). The vulnerability was triggered by plugging in a PixArt HP USB optical mouse after a probe failure.

Recommendations Update to Linux kernel version 6.16.0-rc2-00321-g2aa6621d or a later version to address this issue.

Exploit

Fix

Memory Corruption

Use After Free

Weakness Enumeration

CWE-787

CWE-416

Related Identifiers

BDU:2025-11636

CVE-2025-38394

Affected Products

Astra Linux

Linux Kernel

Pixart Hp Usb Optical Mouse

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38394.json · Exploit
• https://bdu.fstec.ru/vul/2025-11636 · Security Note
• https://osv.dev/vulnerability/CVE-2025-38394 · Vendor Advisory
• https://git.kernel.org/stable/c/c80f2b047d5cc42fbd2dff9d1942d4ba7545100f · Patch
• https://git.kernel.org/stable/c/6ad40b07e15c29712d9a4b8096914ccd82e3fc17 · Patch
• https://cve.org/CVERecord?id=CVE-2025-38394 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-38394 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-38394 · Security Note
• https://ubuntu.com/security/CVE-2025-38394 · Vendor Advisory
• https://lore.kernel.org/linux-cve-announce/2025072509-CVE-2025-38394-f005@gregkh · Note
• https://git.kernel.org/linus/c80f2b047d5cc42fbd2dff9d1942d4ba7545100f · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEnew/status/1948733551685280113 · Twitter Post