CVE-2026-80773: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: huawei: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being on BUSUSB, but don't actually have a USB parent. Fix the use of...

PT-2026-85607

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: fix use-after-free of inrange timer on remove uclogic remove cancels the pen in-range timer and then stops the device: timer delete sync&drvdata-inrange timer; hid hw stophdev; timer delete sync only guarantees the...

PT-2026-85622

In the Linux kernel, the following vulnerability has been resolved: HID: core: fix OOB read of field-usage in hid set field hid set field hands field-usage + offset to hid dump input before the guard that bounds offset: hid dump inputfield-report-device, field-usage + offset, value; if offset =...

PT-2026-91325

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: fix use-after-free of inrange timer on remove uclogic remove cancels the pen in-range timer and then stops the device: timer delete sync&drvdata-inrange timer; hid hw stophdev; timer delete sync only guarantees the...

CVE-2026-80772: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix out-of-bounds read in joyconctlrreadhandler joyconctlrreadhandler casts an incoming HID input report to struct joyconinputreport and parses it, guarding the cast only with a 12-byte length check: if size = 12 /...

CVE-2026-80767: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: sensor: custom: Fix use-after-free in enablesensor enablesensorstore can call setpowerreportstate, which dereferences sensorinst-powerstate and sensorinst-reportstate. These pointers refer to entries in sensorinst-fields...

PT-2026-91362

In the Linux kernel, the following vulnerability has been resolved: HID: ft260: fix stack-use-after-return write in I2C read race ft260 i2c read points dev-read buf at a caller-supplied buffer often an on-stack variable, arms a completion and waits up to five seconds for the device to return the...

CVE-2026-80768: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: ft260: fix stack-use-after-return write in I2C read race ft260i2cread points dev-readbuf at a caller-supplied buffer often an on-stack variable, arms a completion and waits up to five seconds for the device to return the dat...

PT-2026-85613

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix out-of-bounds read in joycon ctlr read handler joycon ctlr read handler casts an incoming HID input report to struct joycon input report and parses it, guarding the cast only with a 12-byte length check: if siz...

PT-2026-85606

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description The Hyper-V synthetic HID host provides SYNTH HID INITIAL DEVICE INFO messages containing a HID descriptor and report descriptor bytes. The mousevsc on receive device info function fails to...

Linux Distros Unpatched Vulnerability : CVE-2026-80766

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: uclogic: fix use-after-free of inrangetimer on remove uclogicremove cancels the pen in-range timer and then stops the device:...

PT-2026-91349

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: do not keep a stale msc-input if no input is claimed magicmouse input mapping caches the first hid input's input dev in msc-input while the report descriptor is parsed, and the rest of the driver treats a non-NUL...

CVE-2026-80781: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: core: fix OOB read of field-usage in hidsetfield hidsetfield hands field-usage + offset to hiddumpinput before the guard that bounds offset: hiddumpinputfield-report-device, field-usage + offset, value; if offset =...

PT-2026-85609

In the Linux kernel, the following vulnerability has been resolved: HID: ft260: fix stack-use-after-return write in I2C read race ft260 i2c read points dev-read buf at a caller-supplied buffer often an on-stack variable, arms a completion and waits up to five seconds for the device to return the...

CVE-2026-80765: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies SYNTHHIDINITIALDEVICEINFO messages that contain a HID descriptor followed by the report descriptor bytes. mousevsconreceivedeviceinfo trusts...

CVE-2026-80769: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: rapoo: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being on BUSUSB, but don't actually have a USB parent. Fix the use of...

CVE-2026-80782: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: do not keep a stale msc-input if no input is claimed magicmouseinputmapping caches the first hidinput's inputdev in msc-input while the report descriptor is parsed, and the rest of the driver treats a non-NULL...

PT-2026-91321

In the Linux kernel, the following vulnerability has been resolved: HID: sensor: custom: Fix use-after-free in enable sensor enable sensor store can call set power report state, which dereferences sensor inst-power state and sensor inst-report state. These pointers refer to entries in sensor...

CVE-2026-80774: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being on BUSUSB, but don't actually have a USB parent. Fix the use of...

PT-2026-91318

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in magicmouse raw event magicmouse raw event handles DOUBLE REPORT ID 0xf7 packets, which pack two touch reports into one, by splitting the packet and calling itself on each half. The...