CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's handling of HID descriptors in Hyper-V environments, where the system fails to validate the lengths of received device info messages. An attacker controlling a malicious Hyper-V host can exploit this flaw to crash a guest virtual machine by sending a malformed initial device-info message. Organizations utilizing Hyper-V with Linux guests should prioritize addressing this vulnerability to prevent potential disruptions in their virtualized environments.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies SYNTH_HID_INITIAL_DEVICE_INFO messages that contain a HID descriptor followed by the report descriptor bytes. mousevsc_on_receive_device_info() trusts bLength and wDescriptorLength without checking that the received packet contains both byte ranges. A malformed host or backend message can therefore make the guest read past the received VMBus packet while copying the report descriptor. Pass the received initial-device-info size into the parser and reject descriptor lengths that exceed the packet. Impact: A malicious Hyper-V host or backend can crash a guest by sending a short initial device-info message with an oversized HID report descriptor length.