A stack buffer overflow in the Linux kernel’s hid-goodix-spi driver occurs when it copies user‑supplied HID report data into a 128‑byte stack buffer without validating the payload size. If an attacker sends a report larger than about 116 bytes via the hidraw SET_REPORT ioctl, the overflow can corrupt the kernel stack, potentially allowing execution of arbitrary code with kernel privileges. This flaw is a classic buffer‑overflow weakness that can compromise the entire system and is included in the kernel driver, making its impact widespread if exploited.

All Linux kernel releases that ship with the hid-goodix-spi driver are affected, as the issue is located within the driver’s core code. The vulnerability is not tied to a specific kernel version in the provided data, so it applies to any kernel using this driver until the patch is applied.

The CVSS score of 7.8 indicates a high severity, while the EPSS score indicates a very low probability of exploitation (<1%). The flaw is not listed in the CISA KEV catalog. Nevertheless, because the flaw can lead to kernel‑level code execution, the potential impact is high. The likely attack vector is a malicious or compromised HID device that sends a large report over USB. Exploitation requires the device to trigger the offending ioctl, which can be achieved by a user with local access or by remotely installing a malicious HID device.