CVE-2026-80765

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1

Description The Hyper-V synthetic HID host provides SYNTH HID INITIAL DEVICE INFO messages containing a HID descriptor and report descriptor bytes. The mousevsc on receive device info() function fails to validate the bLength and wDescriptorLength variables, trusting them without verifying if the received packet contains both byte ranges. Consequently, a malformed host or backend message can cause the guest to read beyond the received VMBus packet while copying the report descriptor. This can be exploited by a malicious Hyper-V host or backend to crash the guest system by sending a short initial device-info message with an oversized HID report descriptor length.

Recommendations Update the Linux kernel to version 7.2.5-1.1 or later.