CVE-2026-72352

Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: Fix hid_bpf_get_data() range check hid_bpf_get_data() returns a pointer into the HID-BPF context data when the caller-provided offset and size fit inside ctx->allocated_size. The current check adds rdwr_buf_size and offset before comparing the result against ctx->allocated_size. Since both values are unsigned, a very large size can wrap the sum below ctx->allocated_size and make the helper return a pointer even though the requested range is not contained in the backing buffer. Use check_add_overflow() to reject wrapped range ends before comparing the requested range end against ctx->allocated_size.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-10-14

AI Q&A

2026-08-15

EPSS Evaluated

2026-10-13

NVD

CVE-2026-72352

EUVD

EUVD-2026-59251

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	658ee5a64fcfbbf758447fa3af425729eaabb0dc
Linux	Linux	658ee5a64fcfbbf758447fa3af425729eaabb0dc
Linux	Linux	658ee5a64fcfbbf758447fa3af425729eaabb0dc
Linux	Linux	658ee5a64fcfbbf758447fa3af425729eaabb0dc
Linux	Linux	6.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's HID-BPF subsystem. The hid_bpf_get_data() function is supposed to return a pointer to HID-BPF context data only if the requested offset and size fit within the allocated buffer. However, due to an integer overflow issue, a very large size value can cause the sum of offset and size to wrap around, making the function incorrectly return a pointer even when the requested range exceeds the buffer size.

Detection Guidance

This vulnerability is specific to the Linux kernel's HID-BPF subsystem and requires kernel-level access to detect. No standard network or system commands can directly detect it. Check if your kernel version includes the vulnerable code path by examining kernel source or running uname -a to compare against patched versions.

Impact Analysis

This vulnerability could allow an attacker to read or write outside the intended memory region in the kernel's HID-BPF context. This may lead to memory corruption, crashes, or privilege escalation if exploited. Users running vulnerable Linux kernels could be affected if HID-BPF is enabled.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a low-level kernel issue in the HID-BPF subsystem that could potentially allow out-of-bounds memory access, but no evidence suggests it impacts data protection or privacy requirements.

Mitigation Strategies

Apply the latest kernel security updates from your Linux distribution. If no patch is available, consider disabling HID-BPF functionality if not required. Monitor vendor advisories for kernel updates addressing CVE-2026-72352.

Hi! I’m here to help you understand CVE-2026-72352. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70