CVE-2026-43048 Details
Description
In the Linux kernel, the following vulnerability has been resolved: HID: core: Mitigate potential OOB by removing bogus memset() The memset() in hid_report_raw_event() has the good intention of clearing out bogus data by zeroing the area from the end of the incoming data string to the assumed end of the buffer. However, as we have previously seen, doing so can easily result in OOB reads and writes in the subsequent thread of execution. The current suggestion from one of the HID maintainers is to remove the memset() and simply return if the incoming event buffer size is not large enough to fill the associated report. Suggested-by Benjamin Tissoires <[email protected]> [bentiss: changed the return value]
A vulnerability in the Linux kernel's Human Interface Device (HID) subsystem can lead to out-of-bounds (OOB) reads and writes. This issue arises from a misguided attempt to clear invalid data in the 'hid_report_raw_event()' function. The original intention was to remove erroneous data by zeroing the buffer from the end of the incoming data to the presumed end of the buffer. However, this approach has inadvertently caused OOB read and write operations in subsequent execution threads. The vulnerability affects the Linux kernel HID core, specifically in versions prior to the latest patch.
Users can apply the latest patch available in the Linux kernel stable tree to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0a3fe972a7cb1404f693d6f1711f32bc1d244b1c | kernel.org | Patch |
| https://git.kernel.org/stable/c/8f71034649738fdeb6859b8d6cddf132024fac06 | kernel.org | Patch |
| https://git.kernel.org/stable/c/bd6e1d0230cca9575f5d118148f51e2a56b5373f | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 2.6.15.1, < 6.18.22 >= 6.19, < 6.19.12 2.6.15 - 2.6.15 rc6 2.6.15 rc7 7.0 rc1 7.0 rc2 7.0 rc3 7.0 rc4 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 7, 2026 | Initial Analysis | [email protected] |
| May 3, 2026 | CVE Modified | kernel.org |
| May 1, 2026 | New CVE Received | kernel.org |