CVE-2024-39509

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.9.0-rc7-syzkaller-00183-gcf87f46fd34d

Description: The issue is related to the HID core in the Linux kernel, where a warning is triggered when trying to write a value into a field of smaller size in an output report. The implement() function already has a warning message printed with the help of hid warn(), and the value in question gets trimmed. The WARN ON may be considered superfluous and can be removed to suppress future syzkaller triggers.

Recommendations: To resolve the issue, update the Linux kernel to a version that includes the fix for the HID core vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.