CVE-2025-21794 HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
A stack-out-of-bounds read in the Linux kernel HID Thrustmaster driver can cause a kernel crash, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-21794?
CVE-2025-21794 is a high-severity memory corruption vulnerability in Linux kernel, published on 27 Feb 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()
Syzbot[1] has detected a stack-out-of-bounds read of the ep_addr array from hid-thrustmaster driver. This array is passed to usb_check_int_endpoints function from usb.c core driver, which executes a for loop that iterates over the elements of the passed array. Not finding a null element at the end of the array, it tries to read the next, non-existent element, crashing the kernel.
To fix this, a 0 element was added at the end of the array to break the for loop.
[1] https://syzkaller.appspot.com/bug?extid=9c9179ac46169c56c1ad
Weakness: CWE-125
Which versions are affected by CVE-2025-21794?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2025-21794?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2025-21794 being exploited?
There is no known exploitation of CVE-2025-21794 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-57764, BELL-CVE-2025-21794, DEBIAN-CVE-2025-21794, GHSA-8868-h956-r68g, UBUNTU-CVE-2025-21794.