Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-31522

HID: magicmouse: avoid memory leak in magicmouse_report_fixup()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: avoid memory leak in magicmouse_report_fixup() The magicmouse_report_fixup() function was returning a newly kmemdup()-allocated buffer, but never freeing it. The caller of report_fixup() does not take ownership of the returned pointer, but it *is* permitted to return a sub-portion of the input rdesc, whose lifetime is managed by the caller.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e6ad399596bd234be4722022146e33e15c7e424d to < 579c4c9857acdc8380fa99803f355f878bd766cbaffected
  • 0b91b4e4dae63cd43871fc2012370b86ee588f91 to < d84c21aabaab517b9aaf9bc1d785922cb9db2f31affected
  • 0b91b4e4dae63cd43871fc2012370b86ee588f91 to < 7edfe4346b052b708645d0acc0f186425766b785affected
  • 0b91b4e4dae63cd43871fc2012370b86ee588f91 to < 79e5dcc95d9abed6f8203cfd529f4ec71f0e505daffected
  • 0b91b4e4dae63cd43871fc2012370b86ee588f91 to < 136f605e246b4bfe7ac2259471d1ff814aed0084affected
  • 0b91b4e4dae63cd43871fc2012370b86ee588f91 to < fa95b0146358b49f9858139b67314591fd5871b0affected
  • 0b91b4e4dae63cd43871fc2012370b86ee588f91 to < 91e8c6e601bdc1ccdf886479b6513c01c7e51c2caffected
  • c394bd1bc8537e61593b6b6799e01495c7cf9008affected
  • 5.15.17 to < 5.15.203affected
  • 5.16.3 to < 5.17affected

Linux Linux

Default version status: affected

  • 5.17affected
  • 0 to < 5.17unaffected
  • 5.15.203 to ≤ 5.15.*unaffected
  • 6.1.168 to ≤ 6.1.*unaffected
  • 6.6.131 to ≤ 6.6.*unaffected
  • 6.12.80 to ≤ 6.12.*unaffected
  • 6.18.21 to ≤ 6.18.*unaffected
  • 6.19.11 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References