A critical out-of-bounds write vulnerability in the Linux kernel sensor-hub driver could allow an attacker to trigger memory corruption and potentially achieve arbitrary code execution.

This is an out-of-bounds write vulnerability (CWE-787) occurring within the sensor_hub_get_feature function. An unauthenticated attacker can supply a malicious HID descriptor to trigger the flaw when the kernel copies data into an undersized stack buffer.

Successful exploitation of this vulnerability can result in system-wide instability, kernel panics, or the execution of arbitrary code with high privileges. Given the CVSS score of 8.8, this represents a significant risk to the integrity and availability of affected systems. Organizations relying on Linux-based infrastructure, particularly those utilizing hardware sensors or HID devices, face potential service disruption and unauthorized system access.

Immediate Action: Update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or later depending on the specific distribution branch in use.

Proactive Monitoring: Monitor system logs for kernel oops, segmentation faults, or unusual driver behavior related to HID device initialization.

Compensating Controls: Restrict physical access to USB or HID-capable ports where possible, as the attack vector requires proximity or access to the HID subsystem.

Public Exploit Available: Unknown.

This vulnerability presents a high risk due to its potential for kernel-level impact. Administrators should prioritize patching the kernel across all relevant deployments as soon as vendor-provided updates are verified. Applying the identified fixed versions is the only definitive method to mitigate the risk of memory corruption associated with this HID driver flaw.