CVE-2026-97538
Received Received - Intake

ASUS ROG Ryujin HID Report Length Validation Flaw

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus_rog_ryujin) Validate HID report lengths rog_ryujin_raw_event() parses response headers and payload fields without first checking that they are present in the received report. A short report can therefore make the driver consume uninitialized bytes from the HID transport buffer and expose them as sensor values through sysfs. Validate the response header and the fields used by each response type before parsing them.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-97538
EUVD
EUVD-2026-86846

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
asus rog_ryujin *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the Linux kernel's hwmon subsystem, specifically the asus_rog_ryujin driver. The issue is in the rog_ryujin_raw_event() function, which parses response headers and payload fields without verifying their presence in the received report. A short report could cause the driver to read uninitialized memory from the HID transport buffer and expose it as sensor values through sysfs.

Detection Guidance

This vulnerability affects the Linux kernel's hwmon subsystem, specifically the asus_rog_ryujin driver. Detection requires checking if the system uses this driver and kernel version with the flaw. Inspect loaded kernel modules with lsmod | grep asus_rog_ryujin and check kernel version with uname -a. If present, monitor sysfs entries under /sys/class/hwmon/ for unexpected sensor values.

Impact Analysis

This vulnerability could allow an attacker to read uninitialized memory contents, potentially exposing sensitive data. Since the driver exposes sensor values through sysfs, an attacker might access corrupted or stale data that could include remnants of previous operations or sensitive information.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for CVE-2026-97538. If immediate kernel update is not possible, disable the asus_rog_ryujin driver by blacklisting it via modprobe.blacklist=asus_rog_ryujin in boot parameters. Avoid using ASUS ROG Ryujin devices until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97538. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart