PT-2026-30184 · Linux · Linux

Published 2026-04-03 · Updated 2026-04-03 · CVE-2026-31401

Mitre

In the Linux kernel, the following vulnerability has been resolved:

HID: bpf: prevent buffer overflow in hid hw request

right now the returned value is considered to be always valid. However, when playing with HID-BPF, the return value can be arbitrary big, because it's the return value of dispatch hid bpf raw requests(), which calls the struct ops and we have no guarantees that the value makes sense.

Related Identifiers

CVE-2026-31401

Affected Products

Linux

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-31401 · Security Note
• https://git.kernel.org/stable/c/eb57dae20fdf6f3069cdc07821fa3bb46de381d7 · Note
• https://git.kernel.org/stable/c/d6efaa50af62fb0790dd1fd4e7e5506b46312510 · Note
• https://git.kernel.org/stable/c/73c5b5aea1c443239c8cb4191b4af7a4bd6fd7b1 · Note
• https://git.kernel.org/stable/c/2b658c1c442ec1cd9eec5ead98d68662c40fe645 · Note