CVE-2026-23382: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
HID: Add HIDCLAIMEDINPUT guards in rawevent callbacks missing them
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.130.1-1 - Upgrade
Upgrade
Linux kernel HID driversto a version that resolves this vulnerability.Patch 2ff5baa9b527
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23382?
The severity of CVE-2026-23382 is classified as moderate due to the potential for NULL dereference in HID raw event handling.
How do I fix CVE-2026-23382?
To fix CVE-2026-23382, update your Linux kernel to a version that includes the mitigations implemented in commit 2ff5baa9b527.
What systems are affected by CVE-2026-23382?
CVE-2026-23382 affects the Linux kernel versions prior to the incorporation of the fix that adds HID_CLAIMED_INPUT guards.
What are the potential impacts of CVE-2026-23382?
The potential impacts of CVE-2026-23382 include the risk of system crashes or unexpected behavior due to unhandled NULL dereferences.
Is there a public exploit for CVE-2026-23382?
As of now, there are no known public exploits for CVE-2026-23382, but it's important to apply the necessary updates to mitigate risks.