Riskcovery

CVE-2026-97538

hwmon: (asus_rog_ryujin) Validate HID report lengths

State
Published
Severity
Not scored
Published
Sep 25, 2026
Updated
Oct 21, 2026
Reserved
Sep 24, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (asus_rog_ryujin) Validate HID report lengths

rog_ryujin_raw_event() parses response headers and payload fields without first checking that they are present in the received report. A short report can therefore make the driver consume uninitialized bytes from the HID transport buffer and expose them as sensor values through sysfs.

Validate the response header and the fields used by each response type before parsing them.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ed3e03790c5c9f29f032dde9bb784e198984a759 to before 995f22b2881835b518b3f99240d00781c9df0235Affected
  • ed3e03790c5c9f29f032dde9bb784e198984a759 to before 1caa5f9399ff107a8fa221b1eaca0a9e729d3758Affected
  • ed3e03790c5c9f29f032dde9bb784e198984a759 to before 8042312e73c50de82634ce63eae7cf219464b481Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.12.114 through 6.12.*Not affected
  • 7.2.7 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.