CVE-2026-31625
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-04-24
Modified: 2026-11-11
First seen: 2026-11-06
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix NULL pointer dereference in alps_raw_event() Commit ecfa6f34492c ("HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them") attempted to fix up the HID drivers that had missed the previous fix that was done in 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at raw event handle"), but the alps driver was missed. Fix this up by properly checking in the hid-alps driver that it had been claimed correctly before attempting to process the raw event.
Weakness Classification (1)
Affected Software (11)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 73196ebe134d11a68a2e27814c489d685cfc8b03 < 56850666bb5dcf7a13d76c5d02864813e17ee537 |
| Linux | Linux | 73196ebe134d11a68a2e27814c489d685cfc8b03 < 72516a8d7fe247fd895424bab87952f105a0c255 |
| Linux | Linux | 73196ebe134d11a68a2e27814c489d685cfc8b03 < cc411e4823d8bfa23327d9989a0fa4e0ce76aebe |
| Linux | Linux | 73196ebe134d11a68a2e27814c489d685cfc8b03 < c8cc765253ad89ccc106a7bdeb5aeac6cf963078 |
| Linux | Linux | 73196ebe134d11a68a2e27814c489d685cfc8b03 < 8eed7bce7a4c41ab28ee4891103623a12fd41611 |
| Linux | Linux | 73196ebe134d11a68a2e27814c489d685cfc8b03 < 0091dfa542a362c178a7e9393097138a57d327d1 |
| Linux | Linux | 73196ebe134d11a68a2e27814c489d685cfc8b03 < 4b618248d2307a219d9431a730cfe1156c8e3386 |
| Linux | Linux | 73196ebe134d11a68a2e27814c489d685cfc8b03 < ee2cb3ddfdca949dbc0c3f796ed5a439f0efc9f6 |
| Linux | Linux | 73196ebe134d11a68a2e27814c489d685cfc8b03 < 1badfc4319224820d5d890f8eab6aa52e4e83339 |
| Linux | Linux | 4.15 |
| linux | linux_kernel | 4.15 – 6.6.136 |