CVE-2026-72352
Received Received - Intake

HID-BPF Context Data Range Validation Fix in Linux Kernel

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: HID: bpf: Fix hid_bpf_get_data() range check hid_bpf_get_data() returns a pointer into the HID-BPF context data when the caller-provided offset and size fit inside ctx->allocated_size. The current check adds rdwr_buf_size and offset before comparing the result against ctx->allocated_size. Since both values are unsigned, a very large size can wrap the sum below ctx->allocated_size and make the helper return a pointer even though the requested range is not contained in the backing buffer. Use check_add_overflow() to reject wrapped range ends before comparing the requested range end against ctx->allocated_size.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72352
EUVD
EUVD-2026-59251

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's HID-BPF subsystem. The hid_bpf_get_data() function is supposed to return a pointer to HID-BPF context data only if the requested offset and size fit within the allocated buffer. However, due to an integer overflow issue, a very large size value can cause the sum of offset and size to wrap around, making the function incorrectly return a pointer even when the requested range exceeds the buffer size.

Detection Guidance

This vulnerability is specific to the Linux kernel's HID-BPF subsystem and requires kernel-level access to detect. No standard network or system commands can directly detect it. Check if your kernel version includes the vulnerable code path by examining kernel source or running uname -a to compare against patched versions.

Impact Analysis

This vulnerability could allow an attacker to read or write outside the intended memory region in the kernel's HID-BPF context. This may lead to memory corruption, crashes, or privilege escalation if exploited. Users running vulnerable Linux kernels could be affected if HID-BPF is enabled.

Mitigation Strategies

Apply the latest kernel security updates from your Linux distribution. If no patch is available, consider disabling HID-BPF functionality if not required. Monitor vendor advisories for kernel updates addressing CVE-2026-72352.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72352. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart