CVE-2025-38556

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The HID core is susceptible to a shift-out-of-bounds exception when converting a 32-bit quantity to a 0-bit quantity. This can occur due to buggy devices reporting a report field with a size set to zero. The s32ton() routine has been hardened to return a reasonable result instead of crashing when called with the number of bits set to 0, mirroring the behavior of snto32().

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.