Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-31624

In the Linux kernel, the following vulnerability has been resolved: HID: core: clamp report_size in s32ton() to avoid undefined shift s32ton() shifts by n-1 where n is the field's report_size, a value that comes directly from a HID device. The HID parser bounds report_size only to <= 256, so a broken HID device can supply a report descriptor with a wide field that triggers shift exponents up to 256 on a 32-bit type when an output report is built via hid_output_field() or hid_set_field(). Com
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:d69a9361bbd9a335935dd7b95d5df7f3b19bcc49f4d5c6b0c0e4041b46d50ab5
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/hid/hid-core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"76ad02854a30c394e0c076e6e6bed0a388573a94","status":"affected","version":"dde5845a529ff753364a6d1aea61180946270bfa","versionType":"git"},{"lessThan":"eb415ddaf25e09ddb8fe5736a70c9de2e6462534","status":"affected","version":"dde5845a529ff753364a6d1aea61180946270bfa","versionType":"git"},{"lessThan":"0ab048dbdb1daacf17d52e9252297eb6e1298e49","status":"affected","version":"dde5845a529ff753364a6d1…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1f002bf827e319ed6a03d169145b46946d345f8bee3daaa9ed900bc2c8779139 · sha256:4e17443e83306718… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/hid/hid-core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.20"},{"lessThan":"2.6.20","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"le…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1f002bf827e319ed6a03d169145b46946d345f8bee3daaa9ed900bc2c8779139 · sha256:4e17443e83306718… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/hid/hid-core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"76ad02854a30c394e0c076e6e6bed0a388573a94","status":"affected","version":"dde5845a529ff753364a6d1aea61180946270bfa","versionType":"git"},{"lessThan":"eb415ddaf25e09ddb8fe5736a70c9de2e6462534","status":"affected","version":"dde5845a529ff753364a6d1aea61180946270bfa","versionType":"git"},{"lessThan":"0ab048dbdb1daacf17d52e9252297eb6e1298e49","status":"affected","version":"dde5845a529ff753364a6d1…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1f002bf827e319ed6a03d169145b46946d345f8bee3daaa9ed900bc2c8779139 · sha256:4e17443e83306718… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/hid/hid-core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.20"},{"lessThan":"2.6.20","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"le…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1f002bf827e319ed6a03d169145b46946d345f8bee3daaa9ed900bc2c8779139 · sha256:4e17443e83306718… · /containers/cna/affected/1

Source references

9 source assertions
{"url":"https://git.kernel.org/stable/c/0ab048dbdb1daacf17d52e9252297eb6e1298e49"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1f002bf827e319ed6a03d169145b46946d345f8bee3daaa9ed900bc2c8779139 · sha256:4e17443e83306718… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/58386f00af710922cafb0fb69211497beddfaa95"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1f002bf827e319ed6a03d169145b46946d345f8bee3daaa9ed900bc2c8779139 · sha256:4e17443e83306718… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/69c02ffde6ed4d535fa4e693a9e572729cad3d0d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1f002bf827e319ed6a03d169145b46946d345f8bee3daaa9ed900bc2c8779139 · sha256:4e17443e83306718… · /containers/cna/references/8
{"url":"https://git.kernel.org/stable/c/76ad02854a30c394e0c076e6e6bed0a388573a94"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1f002bf827e319ed6a03d169145b46946d345f8bee3daaa9ed900bc2c8779139 · sha256:4e17443e83306718… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/8a8333237f1f5caab8d4c3d2c2e7578c4263a97f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1f002bf827e319ed6a03d169145b46946d345f8bee3daaa9ed900bc2c8779139 · sha256:4e17443e83306718… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/932ae5309e53561197aa7d1606c7cf63af10e24f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1f002bf827e319ed6a03d169145b46946d345f8bee3daaa9ed900bc2c8779139 · sha256:4e17443e83306718… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/97014719bb8fccb1ffcbbc299e84b1f11b114195"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1f002bf827e319ed6a03d169145b46946d345f8bee3daaa9ed900bc2c8779139 · sha256:4e17443e83306718… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/ea363a34086ddb4231adc581a7f36c39ec154bfc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1f002bf827e319ed6a03d169145b46946d345f8bee3daaa9ed900bc2c8779139 · sha256:4e17443e83306718… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/eb415ddaf25e09ddb8fe5736a70c9de2e6462534"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1f002bf827e319ed6a03d169145b46946d345f8bee3daaa9ed900bc2c8779139 · sha256:4e17443e83306718… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer