Cloudanix VulnDB

CVE-2026-80773

None

CVSS

—

EPSS

0.2%

Published

Sep 4, 2026

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A bug in how the Linux kernel handles certain input devices could let an attacker on the same computer cause the whole system to crash.

Exploitation
Local Privilege
Attacker needs
Local User
Complexity
Low
Impact
Denial Of Service
Component
OS kernel
Class
Improper Input Validation
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

Missing hid_is_usb() guard allows to_usb_interface() to be invoked on uhid-created devices that report BUS_USB without an actual USB parent, resulting in invalid pointer dereference and kernel splat.

Why it matters to the business

Systems running affected kernels may experience unexpected crashes or instability when certain user-space created HID devices are present, leading to denial of service and potential data loss or service interruption.

How an attack unfolds

An attacker with local access creates a uhid device that advertises itself on BUS_USB; when the huawei HID driver processes the device it calls to_usb_interface() without the required check, triggering the invalid access and kernel fault.

How to fix it

Apply the upstream commit that adds the hid_is_usb() check before to_usb_interface() usage; rebuild and deploy the fixed kernel across all affected Linux distributions.

How to confirm the fix worked

Confirm the presence of the hid_is_usb() guard in the huawei HID driver source; monitor kernel logs after device creation to verify absence of the previous splat.

Typical attack path

  1. Obtain local unprivileged access on a Linux system
  2. Use uhid to instantiate a synthetic HID device reporting BUS_USB
  3. Trigger huawei driver probe path for the device
  4. Cause kernel dereference of non-USB interface structure

How to detect it

Search kernel logs and dmesg for splats or oops messages originating from the huawei HID driver or to_usb_interface calls; review audit logs for recent uhid device creation events.

  • BUG: KASAN: null-ptr-deref in to_usb_interface
  • hid_is_usb
  • huawei

What your security team should do

  • Prioritize kernel updates containing the fix within the next maintenance window
  • Audit systems for use of uhid or custom HID device creation
  • Enable kernel hardening options such as KASAN in test environments to surface similar issues early

The record

In the Linux kernel, the following vulnerability has been resolved: HID: huawei: fix missing hid_is_usb() check to_usb_interface() can only be used on a hid_device whose parent is really USB; uhid can create devices that identify as being on BUS_USB, but don't actually have a USB parent. Fix the use of to_usb_interface() without a hid_is_usb() check. I have verified that it is currently possible to trigger a kernel splat due to this bug in an ASAN build, and that this commit fixes the issue.

Affected packages

Ecosystem Package Introduced Fixed