NetSight
IP …
medium5.5

CVE-2026-23382

In the Linux kernel, the following vulnerability has been resolved: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them In commit 2ff5baa9b52…

Impact

In the Linux kernel, the following vulnerability has been resolved: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them In commit 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at raw event handle"), we handle the fact that raw event callbacks can happen even for a HID device that has not been "claimed" causing a crash if a broken device were attempted to be connected to the system. Fix up the remaining in-tree HID drivers that forgot to add this same check to resolve the same issue.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.35.1 before 5.10.253
from 5.11 before 5.15.203
from 5.16 before 6.1.167
from 6.2 before 6.6.130
from 6.7 before 6.12.77
from 6.13 before 6.18.17

Weakness classification

CWE-476

References