SB2026040637 - Stack-based buffer overflow in Linux kernel hid bpf driver
Published: April 6, 2026
Security Bulletin ID
SB2026040637
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Stack-based buffer overflow (CVE-ID: CVE-2026-31401)
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to stack-based buffer overflow in hid_hw_request when processing an arbitrary return value from HID-BPF raw requests. A local user can supply a crafted return value through HID-BPF struct_ops to cause a denial of service.
The issue occurs because the returned value from dispatch_hid_bpf_raw_requests() is not guaranteed to be valid and can be arbitrarily large when using HID-BPF.
Remediation
Install update from vendor's website.