ROOT-OS-DEBIAN-13-CVE-2026-31624 CVE-2026-31624 in rootio-linux - Patched by Root

Root has patched CVE-2026-31624 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-31624 CVE-2026-31624 in rootio-linux - Patched by Root

Root has patched CVE-2026-31624 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

CVE-2026-31624

creationtimestamp| type| source ---|---|--- 2026-07-02 05:50:05+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-07-06 05:52:06+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...

Linux Distros Unpatched Vulnerability : CVE-2026-31624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: core: clamp reportsize in s32ton to avoid undefined shift s32ton shifts by n-1 where n is the field's reportsize, a value that comes directly from a HID...

CVE-2026-31624

In the Linux kernel, the following vulnerability has been resolved: HID: core: clamp reportsize in s32ton to avoid undefined shift s32ton shifts by n-1 where n is the field's reportsize, a value that comes directly from a HID device. The HID parser bounds reportsize only to 32 clamp to the functi...

CVE-2026-31624

CVE-2026-31624) affects the Linux kernel HID core. The vulnerability arises when a HID device supplies a report descriptor with a large report_size, causing s32ton() to shift by n-1 with n > 32. The issue is resolved by clamping n to the same maximum used by snto32(), per commit ec61b41918587,...