Cloudanix VulnDB

CVE-2026-80774

None

CVSS

—

EPSS

0.2%

Published

Sep 4, 2026

CISA due date

—

Cloudanix analysis

Monitor only SSVC: Track

A flaw in Linux input-device handling can make the system crash when certain ASUS or virtual devices are connected.

Exploitation
Local Privilege
Attacker needs
Local User
Complexity
Moderate
Impact
Denial Of Service
Component
OS kernel
Class
Improper Input Validation
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

Missing hid_is_usb() check before to_usb_interface() in the ASUS HID driver allows uhid-created virtual devices that report BUS_USB to reach invalid USB parent dereference, triggering kernel splat.

Why it matters to the business

Kernel instability or crashes on Linux systems when processing ASUS HID devices or virtual uhid inputs, leading to unexpected reboots and operational disruption.

How an attack unfolds

An attacker creates a uhid device that advertises BUS_USB without an actual USB parent; the ASUS HID driver processes the device, skips the missing validation, and calls to_usb_interface() on an invalid structure, producing a kernel splat.

How to fix it

Apply the upstream patch that inserts the hid_is_usb() guard before to_usb_interface() usage in the ASUS HID driver.

How to confirm the fix worked

Inspect the patched hid-asus.c source for the hid_is_usb() conditional; reproduce with a uhid BUS_USB device and confirm absence of kernel splat under ASAN.

Typical attack path

  1. Create uhid device reporting BUS_USB identity
  2. Register the device so it reaches the ASUS HID driver
  3. Trigger the code path that omits hid_is_usb()
  4. Invoke to_usb_interface() on non-USB parent causing splat

How to detect it

Search kernel logs and dmesg for ASUS HID driver entries mentioning uhid, to_usb_interface, or address-sanitizer violations around device registration.

What your security team should do

  • Update to a kernel containing the hid_is_usb() fix
  • Audit systems for ASUS HID or uhid usage patterns
  • Review kernel logs for HID-related oops entries

The record

In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix missing hid_is_usb() check to_usb_interface() can only be used on a hid_device whose parent is really USB; uhid can create devices that identify as being on BUS_USB, but don't actually have a USB parent. Fix the use of to_usb_interface() without a hid_is_usb() check. I have verified that it is currently possible to trigger a kernel splat due to this bug in an ASAN build, and that this commit fixes the issue.

Affected packages

Ecosystem Package Introduced Fixed