CVE-2026-23382

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-23382
In the Linux kernel, the following vulnerability has been resolved: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them In commit 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at raw event handle"), we handle the fact that raw event callbacks can happen even for a HID device that has not been "claimed" causing a crash if a broken device were attempted to be connected to the system. Fix up the remaining in-tree HID drivers that forgot to add this same check to resolve the same issue.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/20864e3e41c74cda253a9fa6b6fe093c1461a6a9 Patch
https://git.kernel.org/stable/c/575122cd6569c4c4aa13c4c9958fea506724c788 Patch
https://git.kernel.org/stable/c/6e330889e6c8db99f04d4feb861d23de4e8fbb13 Patch
https://git.kernel.org/stable/c/892dbaf46bb738dacf1fa663eadb3712c85868f0 Patch
https://git.kernel.org/stable/c/ac83b0d91a3f4f0c012ba9c85fb99436cddb1208 Patch
https://git.kernel.org/stable/c/b48284d7f0f76023b215a3409cdc989b5081eadf Patch
https://git.kernel.org/stable/c/de316c1edf15bc30ff5e0d4c7b37c70fd41cf319 Patch
https://git.kernel.org/stable/c/ecfa6f34492c493a9a1dc2900f3edeb01c79946b Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.35:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
History

24 Apr 2026, 18:42

Type Values Removed Values Added
CWE CWE-476
CPE cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.35:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/20864e3e41c74cda253a9fa6b6fe093c1461a6a9 - () https://git.kernel.org/stable/c/20864e3e41c74cda253a9fa6b6fe093c1461a6a9 - Patch
References () https://git.kernel.org/stable/c/575122cd6569c4c4aa13c4c9958fea506724c788 - () https://git.kernel.org/stable/c/575122cd6569c4c4aa13c4c9958fea506724c788 - Patch
References () https://git.kernel.org/stable/c/6e330889e6c8db99f04d4feb861d23de4e8fbb13 - () https://git.kernel.org/stable/c/6e330889e6c8db99f04d4feb861d23de4e8fbb13 - Patch
References () https://git.kernel.org/stable/c/892dbaf46bb738dacf1fa663eadb3712c85868f0 - () https://git.kernel.org/stable/c/892dbaf46bb738dacf1fa663eadb3712c85868f0 - Patch
References () https://git.kernel.org/stable/c/ac83b0d91a3f4f0c012ba9c85fb99436cddb1208 - () https://git.kernel.org/stable/c/ac83b0d91a3f4f0c012ba9c85fb99436cddb1208 - Patch
References () https://git.kernel.org/stable/c/b48284d7f0f76023b215a3409cdc989b5081eadf - () https://git.kernel.org/stable/c/b48284d7f0f76023b215a3409cdc989b5081eadf - Patch
References () https://git.kernel.org/stable/c/de316c1edf15bc30ff5e0d4c7b37c70fd41cf319 - () https://git.kernel.org/stable/c/de316c1edf15bc30ff5e0d4c7b37c70fd41cf319 - Patch
References () https://git.kernel.org/stable/c/ecfa6f34492c493a9a1dc2900f3edeb01c79946b - () https://git.kernel.org/stable/c/ecfa6f34492c493a9a1dc2900f3edeb01c79946b - Patch
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

18 Apr 2026, 09:16

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: HID: Añadir protecciones HID_CLAIMED_INPUT en las retrollamadas de raw_event que las omiten En el commit 2ff5baa9b527 ('HID: appleir: Corregir posible desreferencia NULL en el manejo de eventos raw'), abordamos el hecho de que las retrollamadas de eventos raw pueden ocurrir incluso para un dispositivo HID que no ha sido 'reclamado', causando un fallo si se intentara conectar un dispositivo defectuoso al sistema. Corregir los controladores HID restantes en el árbol que olvidaron añadir esta misma comprobación para resolver el mismo problema.
References
  • () https://git.kernel.org/stable/c/b48284d7f0f76023b215a3409cdc989b5081eadf -
  • () https://git.kernel.org/stable/c/de316c1edf15bc30ff5e0d4c7b37c70fd41cf319 -

25 Mar 2026, 11:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-25 11:16

Updated : 2026-04-24 18:42

NVD link : CVE-2026-23382

Mitre link : CVE-2026-23382

CVE.ORG link : CVE-2026-23382

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference