CVE-2026-23382
published 2026-03-25CVE-2026-23382: In the Linux kernel, the following vulnerability has been resolved: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them In commit…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.11%
1.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
In commit 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at
raw event handle"), we handle the fact that raw event callbacks
can happen even for a HID device that has not been "claimed" causing a
crash if a broken device were attempted to be connected to the system.
Fix up the remaining in-tree HID drivers that forgot to add this same
check to resolve the same issue.
Affected
33 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.19.8-1 (forky) | linux 6.19.8-1 (forky) |
| linux | linux | — | — |
| linux | linux | >= d0742abaa1c396a26bb3d3ce2732988cd3faa020 < b48284d7f0f76023b215a3409cdc989b5081eadf | b48284d7f0f76023b215a3409cdc989b5081eadf |
| linux | linux | >= d0742abaa1c396a26bb3d3ce2732988cd3faa020 < de316c1edf15bc30ff5e0d4c7b37c70fd41cf319 | de316c1edf15bc30ff5e0d4c7b37c70fd41cf319 |
| linux | linux | >= d0742abaa1c396a26bb3d3ce2732988cd3faa020 < ac83b0d91a3f4f0c012ba9c85fb99436cddb1208 | ac83b0d91a3f4f0c012ba9c85fb99436cddb1208 |
| linux | linux | >= d0742abaa1c396a26bb3d3ce2732988cd3faa020 < 6e330889e6c8db99f04d4feb861d23de4e8fbb13 | 6e330889e6c8db99f04d4feb861d23de4e8fbb13 |
| linux | linux | >= d0742abaa1c396a26bb3d3ce2732988cd3faa020 < 892dbaf46bb738dacf1fa663eadb3712c85868f0 | 892dbaf46bb738dacf1fa663eadb3712c85868f0 |
| linux | linux | >= d0742abaa1c396a26bb3d3ce2732988cd3faa020 < 20864e3e41c74cda253a9fa6b6fe093c1461a6a9 | 20864e3e41c74cda253a9fa6b6fe093c1461a6a9 |
| linux | linux | >= d0742abaa1c396a26bb3d3ce2732988cd3faa020 < 575122cd6569c4c4aa13c4c9958fea506724c788 | 575122cd6569c4c4aa13c4c9958fea506724c788 |
| linux | linux | >= d0742abaa1c396a26bb3d3ce2732988cd3faa020 < ecfa6f34492c493a9a1dc2900f3edeb01c79946b | ecfa6f34492c493a9a1dc2900f3edeb01c79946b |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.19.8-1 | 6.19.8-1 |
| linux | linux_kernel | >= 2.6.35 < 6.1.167 | 6.1.167 |
| linux | linux_kernel | >= 2.6.35.1 < 5.10.253 | 5.10.253 |
| linux | linux_kernel | >= 5.11 < 5.15.203 | 5.15.203 |
| linux | linux_kernel | >= 5.16 < 6.1.167 | 6.1.167 |
| linux | linux_kernel | >= 6.13 < 6.18.17 | 6.18.17 |
| linux | linux_kernel | >= 6.13.0 < 6.18.17 | 6.18.17 |
| linux | linux_kernel | >= 6.19 < 6.19.7 | 6.19.7 |
| linux | linux_kernel | >= 6.19.0 < 6.19.7 | 6.19.7 |
| linux | linux_kernel | >= 6.2 < 6.6.130 | 6.6.130 |
| linux | linux_kernel | >= 6.2.0 < 6.6.130 | 6.6.130 |
| linux | linux_kernel | >= 6.7 < 6.12.77 | 6.12.77 |
| linux | linux_kernel | >= 6.7.0 < 6.12.77 | 6.12.77 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vendor_msrc5.5MEDIUM
vendor_redhat5.5MEDIUM
vendor_ubuntu2.0LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2026-07-20·CVSS 2.0
CVE-2026-46073 [LOW] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
It was discovered that some AMD processors did not properly clear data in
the floating point divider unit during speculative execution. A local
attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate
shared resources in the operation cache. A local attacker could possibly
use this issue to corrupt instructions executed at a higher privilege
level, resulting in privilege escalation. (CVE-2025-54518)
It was discovered that some AMD Zen 5 processors supporting RDSEED
instruction did not properly handle entropy, potentially resulting in the
consumption of insufficiently random values. A local attacke
Red Hat
kernel: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
vendor_redhat·2026-03-25·CVSS 5.5
CVE-2026-23382 [MEDIUM] CWE-414 kernel: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
kernel: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
In the Linux kernel, the following vulnerability has been resolved:
HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
In commit 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at
raw event handle"), we handle the fact that raw event callbacks
can happen even for a HID device that has not been "claimed" causing a
crash if a broken device were attempted to be connected to the system.
Fix up the remaining in-tree HID drivers that forgot to add this same
check to resolve the same issue.
A flaw was found in the Linux kernel's Human Interface Device (HID) drivers. This vulnerability occurs when raw event callbacks are processed for an unclaimed HID device, due to missing input validati
Microsoft
HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
vendor_msrc·2026-03-10·CVSS 5.5
CVE-2026-23382 [MEDIUM] HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
Mariner: Mariner
Linux: Linux
Customer Action Required: Yes
Remediation: CBL-Mariner Releases
Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
Debian
CVE-2026-23382: linux - In the Linux kernel, the following vulnerability has been resolved: HID: Add HI...
vendor_debian·2026
CVE-2026-23382 CVE-2026-23382: linux - In the Linux kernel, the following vulnerability has been resolved: HID: Add HI...
In the Linux kernel, the following vulnerability has been resolved: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them In commit 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at raw event handle"), we handle the fact that raw event callbacks can happen even for a HID device that has not been "claimed" causing a crash if a broken device were attempted to be connected to the system. Fix up the remaining in-tree HID drivers that forgot to add this same check to resolve the same issue.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 6.19.8-1)
sid: resolved (fixed in 6.19.8-1)
trixie: open
OSV
HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
osv·2026-03-25
CVE-2026-23382 HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
In the Linux kernel, the following vulnerability has been resolved:
HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
In commit 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at
raw event handle"), we handle the fact that raw event callbacks
can happen even for a HID device that has not been "claimed" causing a
crash if a broken device were attempted to be connected to the system.
Fix up the remaining in-tree HID drivers that forgot to add this same
check to resolve the same issue.
GHSA
GHSA-22m9-9vqx-v8ww: In the Linux kernel, the following vulnerability has been resolved:
HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
In commit
ghsa_unreviewed·2026-03-25
CVE-2026-23382 GHSA-22m9-9vqx-v8ww: In the Linux kernel, the following vulnerability has been resolved:
HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
In commit
In the Linux kernel, the following vulnerability has been resolved:
HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
In commit 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at
raw event handle"), we handle the fact that raw event callbacks
can happen even for a HID device that has not been "claimed" causing a
crash if a broken device were attempted to be connected to the system.
Fix up the remaining in-tree HID drivers that forgot to add this same
check to resolve the same issue.
OSV
CVE-2026-23382: In the Linux kernel, the following vulnerability has been resolved: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them In commit 2f
osv·2026-03-25
CVE-2026-23382 CVE-2026-23382: In the Linux kernel, the following vulnerability has been resolved: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them In commit 2f
In the Linux kernel, the following vulnerability has been resolved: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them In commit 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at raw event handle"), we handle the fact that raw event callbacks can happen even for a HID device that has not been "claimed" causing a crash if a broken device were attempted to be connected to the system. Fix up the remaining in-tree HID drivers that forgot to add this same check to resolve the same issue.
No detection rules found.
No public exploits indexed.
Wiz
CVE-2026-23382 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2026-23382 CVE-2026-23382 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-23382 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
In commit 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at
raw event handle"), we handle the fact that raw event callbacks
can happen even for a HID device that has not been "claimed" causing a
crash if a broken device were attempted to be connected to the system.
Fix up the remaining in-tree HID drivers that forgot to add this same
check to resolve the same issue.
Source : NVD
## 5.5
Score
Published March 25, 2026
Severity MEDIUM
CNA Score N/A
Affected Technologies
Linux Kernel
CBL Mariner
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release
Bugzilla
CVE-2026-23382 kernel: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
bugzilla·2026-03-25·CVSS 5.5
CVE-2026-23382 [MEDIUM] CVE-2026-23382 kernel: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
CVE-2026-23382 kernel: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
In the Linux kernel, the following vulnerability has been resolved:
HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
In commit 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at
raw event handle"), we handle the fact that raw event callbacks
can happen even for a HID device that has not been "claimed" causing a
crash if a broken device were attempted to be connected to the system.
Fix up the remaining in-tree HID drivers that forgot to add this same
check to resolve the same issue.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026032543-CVE-2026-23382-26fe@gregkh/T
https://git.kernel.org/stable/c/20864e3e41c74cda253a9fa6b6fe093c1461a6a9https://git.kernel.org/stable/c/575122cd6569c4c4aa13c4c9958fea506724c788https://git.kernel.org/stable/c/6e330889e6c8db99f04d4feb861d23de4e8fbb13https://git.kernel.org/stable/c/892dbaf46bb738dacf1fa663eadb3712c85868f0https://git.kernel.org/stable/c/ac83b0d91a3f4f0c012ba9c85fb99436cddb1208https://git.kernel.org/stable/c/b48284d7f0f76023b215a3409cdc989b5081eadfhttps://git.kernel.org/stable/c/de316c1edf15bc30ff5e0d4c7b37c70fd41cf319https://git.kernel.org/stable/c/ecfa6f34492c493a9a1dc2900f3edeb01c79946b
2026-03-25
Published