CVE-2026-31625: HID: alps: fix NULL pointer dereference in alps_raw_event()
HID: alps: fix NULL pointer dereference in alpsrawevent()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Modify the hid-alps driver so alps_raw_event() verifies the HID_CLAIMED_INPUT flag and returns without processing if it is not set. Implement the same claimed-input guard logic used in commits ecfa6f34492c and 2ff5baa9b527 to avoid a NULL pointer dereference.
Linux kernel hid-alps driver (hid-alps) HID_CLAIMED_INPUT guard in raw_event callbacks = enabled (check HID_CLAIMED_INPUT before processing)
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31625?
CVE-2026-31625 has a severity rating that is considered moderate due to the potential for a NULL pointer dereference in the HID: alps driver.
How do I fix CVE-2026-31625?
To fix CVE-2026-31625, update your Linux kernel to the latest patched version that addresses this vulnerability.
Which versions of the Linux kernel are affected by CVE-2026-31625?
CVE-2026-31625 affects multiple versions of the Linux kernel including versions from 4.15 up to 6.6.136, 6.7 to 6.12.83, 6.13 to 6.18.24, and 7.0 to 7.0.1.
What components are involved in CVE-2026-31625?
CVE-2026-31625 specifically involves the HID: alps driver within the Linux kernel.
What are the potential impacts of CVE-2026-31625?
The potential impact of CVE-2026-31625 includes system crashes or unexpected behaviors due to a NULL pointer dereference when processing input events.