CVE-2026-97538

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The rog ryujin raw event() function in the asus rog ryujin hardware monitoring (hwmon) driver parses response headers and payload fields without verifying their presence in the received report. This allows a short report to cause the driver to consume uninitialized bytes from the HID (Human Interface Device) transport buffer, which are then exposed as sensor values through sysfs (a virtual filesystem providing an interface to kernel data structures).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.