NetSight
IP …
medium5.5

CVE-2026-31625

In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix NULL pointer dereference in alps_raw_event() Commit ecfa6f34492c ("HID: Add …

Impact

In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix NULL pointer dereference in alps_raw_event() Commit ecfa6f34492c ("HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them") attempted to fix up the HID drivers that had missed the previous fix that was done in 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at raw event handle"), but the alps driver was missed. Fix this up by properly checking in the hid-alps driver that it had been claimed correctly before attempting to process the raw event.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.15 before 6.6.136
from 6.7 before 6.12.83
from 6.13 before 6.18.24
from 6.19 before 6.19.14
from 7.0 before 7.0.1

Weakness classification

CWE-476

References