A vulnerability in the Linux kernel's asus_rog_ryujin hwmon driver allows unvalidated HID report lengths to be parsed, potentially exposing uninitialized memory bytes as sensor values via sysfs. This issue arises because the driver does not verify the presence of expected data fields before parsing them. The vulnerability has been resolved by adding validation checks for response headers and fields prior to parsing.