{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2025-38495",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2025-38495",
    "idYear": 2025,
    "status": "PUBLISHED",
    "publishedAt": "2025-07-28T11:22:04.169Z",
    "updatedAt": "2026-08-05T12:02:24.110Z",
    "importedAt": "2026-10-24T01:57:34.152Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "HID: core: ensure the allocated report buffer can contain the reserved report ID",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: core: ensure the allocated report buffer can contain the reserved report ID\n\nWhen the report ID is not used, the low level transport drivers expect\nthe first byte to be 0. However, currently the allocated buffer not\naccount for that extra byte, meaning that instead of having 8 guaranteed\nbytes for implement to be working, we only have 7.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "4fa5a7f76cc7b6ac87f57741edd2b124851d119f",
              "status": "affected",
              "versionType": "git",
              "lessThan": "7228e36c7875e4b035374cf68ca5e44dffa596b2"
            },
            {
              "version": "4fa5a7f76cc7b6ac87f57741edd2b124851d119f",
              "status": "affected",
              "versionType": "git",
              "lessThan": "9f2892f7233a8f1320fe671d0f95f122191bfbcd"
            },
            {
              "version": "4fa5a7f76cc7b6ac87f57741edd2b124851d119f",
              "status": "affected",
              "versionType": "git",
              "lessThan": "7fa83d0043370003e9a0b46ab7ae8f53b00fab06"
            },
            {
              "version": "4fa5a7f76cc7b6ac87f57741edd2b124851d119f",
              "status": "affected",
              "versionType": "git",
              "lessThan": "d3ed1d84a84538a39b3eb2055d6a97a936c108f2"
            },
            {
              "version": "4fa5a7f76cc7b6ac87f57741edd2b124851d119f",
              "status": "affected",
              "versionType": "git",
              "lessThan": "fcda39a9c5b834346088c14b1374336b079466c1"
            },
            {
              "version": "4fa5a7f76cc7b6ac87f57741edd2b124851d119f",
              "status": "affected",
              "versionType": "git",
              "lessThan": "a262370f385e53ff7470efdcdaf40468e5756717"
            },
            {
              "version": "4fa5a7f76cc7b6ac87f57741edd2b124851d119f",
              "status": "affected",
              "versionType": "git",
              "lessThan": "a47d9d9895bad9ce0e840a39836f19ca0b2a343a"
            },
            {
              "version": "4fa5a7f76cc7b6ac87f57741edd2b124851d119f",
              "status": "affected",
              "versionType": "git",
              "lessThan": "4f15ee98304b96e164ff2340e1dfd6181c3f42aa"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "3.15",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "3.15"
            },
            {
              "version": "5.4.297",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.4.*"
            },
            {
              "version": "5.10.241",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "version": "5.15.190",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.147",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.6.100",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "version": "6.12.40",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "version": "6.15.8",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.15.*"
            },
            {
              "version": "6.16",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}