CVE-2026-23382

MEDIUM

MEDIUM Priority: 0.01 BB Relevance: 36/100

Published: 2026-03-25 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local

AC: Low

PR: Low

UI: None

S: Unchanged

C: None

I: None

A: High

Description

In the Linux kernel, the following vulnerability has been resolved: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them In commit 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at raw event handle"), we handle the fact that raw event callbacks can happen even for a HID device that has not been "claimed" causing a crash if a broken device were attempted to be connected to the system. Fix up the remaining in-tree HID drivers that forgot to add this same check to resolve the same issue.

Weakness Classification (1)

CWE-476

Affected Software (18)

Vendor	Product	Version
Linux	Linux	d0742abaa1c396a26bb3d3ce2732988cd3faa020 < b48284d7f0f76023b215a3409cdc989b5081eadf
Linux	Linux	d0742abaa1c396a26bb3d3ce2732988cd3faa020 < de316c1edf15bc30ff5e0d4c7b37c70fd41cf319
Linux	Linux	d0742abaa1c396a26bb3d3ce2732988cd3faa020 < ac83b0d91a3f4f0c012ba9c85fb99436cddb1208
Linux	Linux	d0742abaa1c396a26bb3d3ce2732988cd3faa020 < 6e330889e6c8db99f04d4feb861d23de4e8fbb13
Linux	Linux	d0742abaa1c396a26bb3d3ce2732988cd3faa020 < 892dbaf46bb738dacf1fa663eadb3712c85868f0
Linux	Linux	d0742abaa1c396a26bb3d3ce2732988cd3faa020 < 20864e3e41c74cda253a9fa6b6fe093c1461a6a9
Linux	Linux	d0742abaa1c396a26bb3d3ce2732988cd3faa020 < 575122cd6569c4c4aa13c4c9958fea506724c788
Linux	Linux	d0742abaa1c396a26bb3d3ce2732988cd3faa020 < ecfa6f34492c493a9a1dc2900f3edeb01c79946b
Linux	Linux	2.6.35
linux	linux_kernel	2.6.35.1 – 5.10.253
linux	linux_kernel	2.6.35
linux	linux_kernel	7.0
linux	linux_kernel	7.0
linux	linux_kernel	7.0
linux	linux_kernel	7.0
linux	linux_kernel	7.0
linux	linux_kernel	7.0
linux	linux_kernel	7.0