Re: CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID
From: Siddh Raman Pant
Date: Tue Sep 30 2025 - 07:10:00 EST
On Tue, Sep 30 2025 at 16:29:03 +0530, gregkh@xxxxxxxxxxxxxxxxxxx
wrote:
> Then the second change is the one that gets the CVE. Any "previous"
> commits in a series that were preparing for the real fix are not called
> out. As each CVE entry says, do NOT cherry-pick, but rather always take
> all of the commits in the stable release.
IMO it won't be nice to change an identifier now and a new ID should be
assigned instead.
Thanks,
Siddh
Attachment:
signature.asc
Description: This is a digitally signed message part