CVE-2026-23382 — Missing Lock Check in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 90.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
In commit 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at
raw event handle"), we handle the fact that raw event callbacks
can happen even for a HID device that has not been "claimed" causing a
crash if a broken device were attempted to be connected to the system.
Fix up the remaining in-tree HID drivers that forgot to add this same
check to r…
Affected Packages3 packages
▶CVEListV5linux/linuxd0742abaa1c396a26bb3d3ce2732988cd3faa020 — ac83b0d91a3f4f0c012ba9c85fb99436cddb1208+6
🔴Vulnerability Details
4GHSA▶
GHSA-22m9-9vqx-v8ww: In the Linux kernel, the following vulnerability has been resolved:
HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
In commit↗2026-03-25
OSV▶
CVE-2026-23382: In the Linux kernel, the following vulnerability has been resolved: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them In commit 2f↗2026-03-25
📋Vendor Advisories
3Debian▶
CVE-2026-23382: linux - In the Linux kernel, the following vulnerability has been resolved: HID: Add HI...↗2026