VDB

CVE-2026-23382

CVE-2026-23382 PUBLISHED

In the Linux kernel, the following vulnerability has been resolved: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them In commit 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at raw event handle"), we handle the fact that raw event callbacks can happen even for a HID device that has not been "claimed" causing a crash if a broken device were attempted to be connected to the system. Fix up the remaining in-tree HID drivers that forgot to add this same check to resolve the same issue.

EPSS 0.03% · 9.5th percentile

Risk Scores

EPSS Score
0.03%
9.5th percentile

Affected Products

VendorProductVersions
linuxlinux_kernel2.6.35, 2.6.35, 2.6.35
LinuxLinuxd0742abaa1c396a26bb3d3ce2732988cd3faa020, d0742abaa1c396a26bb3d3ce2732988cd3faa020, d0742abaa1c396a26bb3d3ce2732988cd3faa020

Timeline

  • Mar 25, 2026 EPSS Score
  • Mar 25, 2026 Coalition ESS Score
  • Mar 25, 2026 CVE Published
  • Mar 29, 2026 Security Advisory
  • Mar 31, 2026 Security Advisory
  • Mar 31, 2026 Security Advisory
  • Mar 31, 2026 Security Advisory
  • Mar 31, 2026 Security Advisory
  • Mar 31, 2026 Security Advisory
  • Mar 31, 2026 Security Advisory
  • Mar 31, 2026 Security Advisory
  • Mar 31, 2026 Security Advisory

References

…and 204 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›