CVE-2026-64603: platform/x86: intel-hid: Protect ACPI notify handler against recursion
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: intel-hid: Protect ACPI notify handler against recursion
Since commit e2ffcda16290 ("ACPI: OSL: Allow Notify () handlers to run on all CPUs") ACPI notify handlers like the intel-hid notifyhandler() may run on multiple CPU cores racing with themselves.
On convertibles and detachables (matched by DMI chassis-type 31 and 32 in dmiautoaddswitch[]) the SWTABLETMODE input device is registered lazily from notifyhandler() on the first tablet-mode event, via intelhidswitchessetup(). When two such events race on different CPUs both can pass the !priv->switches check and register the priv->switches input device twice, resulting in a duplicate sysfs entry and a subsequent NULL pointer dereference.
This is the same class of bug fixed by commit e075c3b13a0a ("platform/x86: intel-vbtn: Protect ACPI notify handler against recursion") for the sibling intel-vbtn driver.
Protect intel-hid notifyhandler() from racing with itself with a mutex to fix this.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch e2ffcda16290 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch e075c3b13a0a
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64603?
CVE-2026-64603 has a risk score of 23, indicating a potentially high impact if exploited.
How do I fix CVE-2026-64603?
To fix CVE-2026-64603, ensure that your Linux kernel is updated to a version that includes the patch for this vulnerability.
What systems are affected by CVE-2026-64603?
CVE-2026-64603 affects systems running the vulnerable versions of the Linux kernel that utilize Intel HID ACPI notify handlers.
What type of vulnerability is CVE-2026-64603?
CVE-2026-64603 is classified as a Null Pointer Dereference vulnerability.
What is the impact of not addressing CVE-2026-64603?
Failure to address CVE-2026-64603 could lead to system instability or potential security exploits through recursion attacks in ACPI notify handlers.