Listen to this Post
How the CVE Works
This vulnerability in the Linux kernel’s HID nintendo driver concerns improper handling of Bluetooth-connected Nintendo Joy-Con controllers during system suspend/resume cycles. The issue arises because a resume hook, originally added for USB controllers, was also incorrectly triggered for Bluetooth devices. When a system resumes from suspend, the driver attempts to re-initialize the Bluetooth controller via joycon_init(). However, Bluetooth connectivity is lost during suspend, causing this initialization to stall indefinitely while waiting for input reports that never arrive. This stall could kernel panic, especially on Android devices. Furthermore, the driver lacked a dedicated suspended state, meaning it could also get stuck during the suspend process itself if the controller had disconnected prior to suspend.
DailyCVE
Platform: Linux Kernel
Version: Up to 6.6
Vulnerability : Use-After-Free
Severity: Medium
date: 2025-08-16
Prediction: Patch by 2025-09-01
What Undercode Say
`dmesg | grep “nintendo\|joycon”`
`cat /sys/kernel/debug/hid//rdesc`
`sudo rmmod hid_nintendo`
`git log –oneline –grep=”CVE-2025-38507″`
How Exploit
An attacker with a paired Bluetooth Joy-Con controller can force a targeted Linux system (e.g., an Android device) into an unstable state. By causing the system to suspend, or by physically moving the controller out of Bluetooth range before the system suspends, the attacker can trigger the kernel stall or panic upon resume, leading to a denial-of-service condition.
Protection from this CVE
Apply kernel patches containing the commit that resolves this issue. The patch introduces a new controller state (JOYCON_CTLR_STATE_SUSPENDED) to prevent stalls during suspend and skips the problematic `joycon_init()` call for Bluetooth controllers during resume.
Impact
Denial-of-Service (DoS) through system crash or kernel panic during resume from suspend, requiring a hard reboot. Affects systems using Bluetooth Nintendo Switch controllers.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
