Linux Kernel HID Report Buffer Vulnerability

A vulnerability in the Linux kernel's Human Interface Device (HID) management has been addressed. The issue arose because the allocated report buffer did not properly account for the reserved report ID. When the report ID is unused, low-level transport drivers expect the first byte to be zero. As a result, the buffer only guaranteed seven bytes for implementation, instead of the required eight.

Impact

The vulnerability could lead to improper handling of HID report data, potentially causing issues in how devices are managed or interacted with at a low level.