{"id":"CVE-2026-97538","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (asus_rog_ryujin) Validate HID report lengths\n\nrog_ryujin_raw_event() parses response headers and payload fields without\nfirst checking that they are present in …","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (asus_rog_ryujin) Validate HID report lengths\n\nrog_ryujin_raw_event() parses response headers and payload fields without\nfirst checking that they are present in …","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= ed3e03790c5c9f29f032dde9bb784e198984a759 < 1caa5f9399ff107a8fa221b1eaca0a9e729d3758","Linux >= ed3e03790c5c9f29f032dde9bb784e198984a759 < 8042312e73c50de82634ce63eae7cf219464b481","Linux 6.9"],"published":"2026-09-25","updated":"2026-09-25","sourceUpdated":"2026-09-25T11:17:04.080","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-97538","references":[{"url":"https://git.kernel.org/stable/c/1caa5f9399ff107a8fa221b1eaca0a9e729d3758","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/8042312e73c50de82634ce63eae7cf219464b481","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-25T11:06:38.922Z","slug":"CVE-2026-97538","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (asus_rog_ryujin) Validate HID report lengths\n\nrog_ryujin_raw_event() parses response headers and payload fields without\nfirst checking that they are present in the received report. A short report\ncan therefore make the driver consume uninitialized bytes from the HID\ntransport buffer and expose them as sensor values through sysfs.\n\nValidate the response header and the fields used by each response type\nbefore parsing them.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}