All vulnerabilities
CVE-2026-93826

Linux: HID: hidpp: fix potential UAF in hidpp_connect_event()

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
7.5High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.23%Chance of exploitation activity in the next 30 days, higher than 13% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in5d7637f4d050d105177217e64b869f56f9825060Also 3b8b2e58b078cd30e121401535541bb8a6d57133, 3303398cc2aa255ba251650a30024e11d48ea6c3 and 1 moreCVE List
Published24 Sep 2026Updated 3 Oct 2026CVE List

What fixes it

  • 5d7637f4d050d105177217e64b869f56f9825060LinuxCVE List
  • 3b8b2e58b078cd30e121401535541bb8a6d57133LinuxCVE List
  • 3303398cc2aa255ba251650a30024e11d48ea6c3LinuxCVE List
  • 6df6b1f2c49678211f65647c300bc51dda02893bLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: hidpp: fix potential UAF in hidpp_connect_event()

If input_register_device() fails, we call input_free_device(), but keep stale pointer to the old device in hidpp->input, which could potentially lead to UAF. Fix that by resetting it to NULL before returning from hidpp_connect_event().

Text from CVE List

Affected versions 12

  • Linuxaffected: c39e3d5fc9dd3e16c6f59dd94d827540040de66d before e03fd646adad7f97fa4429ec5f38cee9bde5276eCVE List
  • Linuxaffected: c39e3d5fc9dd3e16c6f59dd94d827540040de66d before 5d7637f4d050d105177217e64b869f56f9825060CVE List
  • Linuxaffected: c39e3d5fc9dd3e16c6f59dd94d827540040de66d before 3b8b2e58b078cd30e121401535541bb8a6d57133CVE List
  • Linuxaffected: c39e3d5fc9dd3e16c6f59dd94d827540040de66d before 3303398cc2aa255ba251650a30024e11d48ea6c3CVE List
  • Linuxaffected: c39e3d5fc9dd3e16c6f59dd94d827540040de66d before 6df6b1f2c49678211f65647c300bc51dda02893bCVE List
  • Linuxaffected: 3.19CVE List
  • Linuxunaffected: all versions before 3.19CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 5