Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-53037

HID: usbhid: fix deadlock in hid_post_reset()

Description

In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: fix deadlock in hid_post_reset() You can build a USB device that includes a HID component and a storage or UAS component. The components can be reset only together. That means that hid_pre_reset() and hid_post_reset() are in the block IO error handling. Hence no memory allocation used in them may do block IO because the IO can deadlock on the mutex held while resetting a device and calling the interface drivers. Use GFP_NOIO for all allocations in them.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • dc3c78e43469063c5bf4b744214508f94c4129f9 to < 56d318ef8766f0deb08517fd8f3007256ea7997daffected
  • dc3c78e43469063c5bf4b744214508f94c4129f9 to < 90550af0aad5e75110073c501e4fb42fca20ff80affected
  • dc3c78e43469063c5bf4b744214508f94c4129f9 to < eeceb6f4dd42065fdda3a526a93d08b8fb90fb69affected
  • dc3c78e43469063c5bf4b744214508f94c4129f9 to < ad4505d2ab3aaac6498f17649608e70e80034bf2affected
  • dc3c78e43469063c5bf4b744214508f94c4129f9 to < 4e900465296ce9fb12ed47dc77389b8dde95bfe0affected
  • dc3c78e43469063c5bf4b744214508f94c4129f9 to < c7abd0e6c87441e99c759d40eb6fe589634e3041affected
  • dc3c78e43469063c5bf4b744214508f94c4129f9 to < b3d16611d7cd78e9d5c6baa19b61b7caf9f1ab5eaffected
  • dc3c78e43469063c5bf4b744214508f94c4129f9 to < 8df2c1b47ee3cd50fd454f75c7a7e2ae8a6adf72affected

Linux Linux

Default version status: affected

  • 3.5affected
  • 0 to < 3.5unaffected
  • 5.10.258 to ≤ 5.10.*unaffected
  • 5.15.209 to ≤ 5.15.*unaffected
  • 6.1.175 to ≤ 6.1.*unaffected
  • 6.6.141 to ≤ 6.6.*unaffected
  • 6.12.91 to ≤ 6.12.*unaffected
  • 6.18.33 to ≤ 6.18.*unaffected
  • 7.0.10 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References