Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-23382

HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them

Description

In the Linux kernel, the following vulnerability has been resolved: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them In commit 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at raw event handle"), we handle the fact that raw event callbacks can happen even for a HID device that has not been "claimed" causing a crash if a broken device were attempted to be connected to the system. Fix up the remaining in-tree HID drivers that forgot to add this same check to resolve the same issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d0742abaa1c396a26bb3d3ce2732988cd3faa020 to < b48284d7f0f76023b215a3409cdc989b5081eadfaffected
  • d0742abaa1c396a26bb3d3ce2732988cd3faa020 to < de316c1edf15bc30ff5e0d4c7b37c70fd41cf319affected
  • d0742abaa1c396a26bb3d3ce2732988cd3faa020 to < ac83b0d91a3f4f0c012ba9c85fb99436cddb1208affected
  • d0742abaa1c396a26bb3d3ce2732988cd3faa020 to < 6e330889e6c8db99f04d4feb861d23de4e8fbb13affected
  • d0742abaa1c396a26bb3d3ce2732988cd3faa020 to < 892dbaf46bb738dacf1fa663eadb3712c85868f0affected
  • d0742abaa1c396a26bb3d3ce2732988cd3faa020 to < 20864e3e41c74cda253a9fa6b6fe093c1461a6a9affected
  • d0742abaa1c396a26bb3d3ce2732988cd3faa020 to < 575122cd6569c4c4aa13c4c9958fea506724c788affected
  • d0742abaa1c396a26bb3d3ce2732988cd3faa020 to < ecfa6f34492c493a9a1dc2900f3edeb01c79946baffected

Linux Linux

Default version status: affected

  • 2.6.35affected
  • 0 to < 2.6.35unaffected
  • 5.10.253 to ≤ 5.10.*unaffected
  • 5.15.203 to ≤ 5.15.*unaffected
  • 6.1.167 to ≤ 6.1.*unaffected
  • 6.6.130 to ≤ 6.6.*unaffected
  • 6.12.77 to ≤ 6.12.*unaffected
  • 6.18.17 to ≤ 6.18.*unaffected
  • 6.19.7 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References