---
id: CVE-2026-97538
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  hwmon: (asus_rog_ryujin) Validate HID report lengths

  rog_ryujin_raw_event() parses response headers and payload fields without
  first checking that they are present in …
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  hwmon: (asus_rog_ryujin) Validate HID report lengths

  rog_ryujin_raw_event() parses response headers and payload fields without
  first checking that they are present in …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= ed3e03790c5c9f29f032dde9bb784e198984a759 <
    1caa5f9399ff107a8fa221b1eaca0a9e729d3758
  - >-
    Linux >= ed3e03790c5c9f29f032dde9bb784e198984a759 <
    8042312e73c50de82634ce63eae7cf219464b481
  - Linux 6.9
published: '2026-09-25'
updated: '2026-09-25'
sourceUpdated: '2026-09-25T11:17:04.080'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-97538'
references:
  - url: 'https://git.kernel.org/stable/c/1caa5f9399ff107a8fa221b1eaca0a9e729d3758'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/8042312e73c50de82634ce63eae7cf219464b481'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-25T11:06:38.922Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (asus_rog_ryujin) Validate HID report lengths

rog_ryujin_raw_event() parses response headers and payload fields without
first checking that they are present in the received report. A short report
can therefore make the driver consume uninitialized bytes from the HID
transport buffer and expose them as sensor values through sysfs.

Validate the response header and the fields used by each response type
before parsing them.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.