CVE-2026-63947
CVE CVE-2026-63947EUVD EUVD-2026-45720Published 2026-07-19T14:55:41.000ZLast changed 2026-08-05T12:37:34.000ZCVSS 8.8
What the advisory describes
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: fix missing length checks in hidp_input_report() hidp_input_report() reads keyboard and mouse payload data from an skb without first verifying that skb->len contains enough data. hidp_recv_intr_frame() pulls the 1-byte HIDP header before dispatching to hidp_input_report(). If a paired device sends a truncated packet, the handler reads beyond the valid skb data, resulting in an out-of-bounds read of skb data. The OOB bytes may be interpreted as phantom key presses or spurious mouse movement. Replace the open-coded length tracking and pointer arithmetic with skb_pull_data() calls. skb_pull_data() returns NULL if the requested bytes are not present, eliminating the need for a manual size variable and the separate skb->len guard.
Source: EUVD (ENISA), in the words of the advisory.
Products the advisory names
These come from the advisory itself, not from any check we performed.
- Linux — Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <b83dcacd2ec7fcc5a48be215f82d573759f87ec2; patch: 0; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <d313683d6ccdd8c01e0562270a2ae25b86d8461d; patch: 6.18.35; patch: 6.12.93; patch: 7.0.12; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <2a3ac9ee11dbb9845f3947cef4a79dba658cf6f6; patch: 6.1.176; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <d7d6a81b8dd1a8d084a1b755db9406041d53adb5; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <cc3832b19f863e3677c5651f001a2e3795f39eb8; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <6348dfed5b0f9c6074f14322332e97493d32fef0; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <1f08a90013e1e632b34321334e861fcefc056505; patch: 7.1; 2.6.12; patch: 5.15.210; patch: 6.6.143
The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.
Carried in the product catalogue
An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.
- Linux — Linux
Does this concern one of your customers?
This page cannot answer that — it does not know your estate. Whoever has recorded their environments gets the answer the morning after publication, together with a paragraph they can forward to the customer unedited.
Try it for 28 daysPatchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.