Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: HID: bpf: prevent buffer overflow in hid_hw_request right now the returned value is considered to be always valid. However, when playing with HID-BPF, the return value can be arbitrary big, because it's the return value of dispatch_hid_bpf_raw_requests(), which calls the struct_ops and we have no guarantees that the value makes sense.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-31401 In the Linux kernel, the following vulnerability has been resolved: HID https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-31401
Post summary
A brief announcement that CVE-2026-31401 has been resolved, with only a link to an external site; no further technical or exploit information is provided.
A severe vulnerability was disclosed for Linux Kernel (CVE-2026-31401) https://vuldb.com/vuln/355168
Post summary
A severe Linux Kernel vulnerability (CVE-2026-31401) has been disclosed, with reference to a vendor database entry.
CVE-2026-31401 In the Linux kernel, the following vulnerability has been resolved: HID: bpf: prevent buffer overflow in hid_hw_request right now the returned value is considered t… https://www.cve.org/CVERecord?id=CVE-2026-31401
Post summary
The text announces the resolution of CVE‑2026‑31401, detailing a buffer‑overflow issue in Linux kernel HID BPF code, but contains no PoC, exploitation, or patch details.
5 of 5 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |