CVE-2025-38556

HID: core: Harden s32ton() against conversion to 0 bits

References

Notes

 carnil> Introduced in dde5845a529f ("[PATCH] Generic HID layer - code split").
 carnil> Vulnerable versions: 2.6.20.

Bugs

Status

Branch Status
upstream released (6.17-rc1) [a6b87bfc2ab5bccb7ad953693c85d9062aef3fdd]
6.18-upstream-stable N/A "Fixed before branching point"
6.17-upstream-stable N/A "Fixed before branching point"
6.16-upstream-stable released (6.16.1) [865ad8469fa24de1559f247d9426ab01e5ce3a56]
6.15-upstream-stable released (6.15.10) [8b4a94b1510f6a46ec48494b52ee8f67eb4fc836]
6.12-upstream-stable released (6.12.46) [d3b504146c111548ab60b6ef7aad00bfb1db05a2]
6.6-upstream-stable released (6.6.119) [810189546cb6c8f36443ed091d91f1f5d2fc2ec7]
6.1-upstream-stable released (6.1.159) [3c86548a20d7bc2861aa4de044991a327bebad1a]
5.10-upstream-stable needed
sid released (6.16.3-1)
6.12-trixie-security released (6.12.48-1)
6.1-bookworm-security released (6.1.159-1)
5.10-bullseye-security needed