CVE-2026-93826
High · 7.5CVSS
7.5
EPSS
0.2%
Published
Sep 24, 2026
CISA due date
—
The record
In the Linux kernel, the following vulnerability has been resolved: HID: hidpp: fix potential UAF in hidpp_connect_event() If input_register_device() fails, we call input_free_device(), but keep stale pointer to the old device in hidpp->input, which could potentially lead to UAF. Fix that by resetting it to NULL before returning from hidpp_connect_event().
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|