CVE-2026-23382 PUBLISHED

In the Linux kernel, the following vulnerability has been resolved: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them In commit 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at raw event handle"), we handle the fact that raw event callbacks can happen even for a HID device that has not been "claimed" causing a crash if a broken device were attempted to be connected to the system. Fix up the remaining in-tree HID drivers that forgot to add this same check to resolve the same issue.

EPSS 0.02% · 6.5th percentile

Risk Scores

EPSS Score
0.02%
6.5th percentile

Affected Products

VendorProductVersions
linuxlinux_kernel2.6.35, 2.6.35, 2.6.35
LinuxLinuxd0742abaa1c396a26bb3d3ce2732988cd3faa020, d0742abaa1c396a26bb3d3ce2732988cd3faa020, 2.6.35

Timeline

References

…and 64 more

Open in Interactive Console →