CVE-2026-80605

In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in picolcdsendandwait In picolcdsendandwait, an integer overflow of the signed loop counter 'k' can theoretically lead to a NULL pointer dereference of 'rawdata'. If the loop execute...

EUVD-2026-67480

In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hidgetreport for numbered reports When a caller passes a size of 0 to hidreportrawevent for a numbered report, the function originally called hidgetreport before performing any size validation. Inside...

CVE-2026-80604 HID: core: Fix OOB read in hid_get_report for numbered reports

In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hidgetreport for numbered reports When a caller passes a size of 0 to hidreportrawevent for a numbered report, the function originally called hidgetreport before performing any size validation. Inside...

CVE-2026-80604

CVE-2026-80604 is an out-of-bounds read in the Linux kernel's HID core subsystem. When hid_report_raw_event() is called with a size of 0 for a numbered report, it invokes hid_get_report() before validating the size. Inside hid_get_report(), the function unconditionally dereferences data[0] to ext...

CVE-2026-80604 HID: core: Fix OOB read in hid_get_report for numbered reports

In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hidgetreport for numbered reports When a caller passes a size of 0 to hidreportrawevent for a numbered report, the function originally called hidgetreport before performing any size validation. Inside...

CVE-2026-80604

In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hidgetreport for numbered reports When a caller passes a size of 0 to hidreportrawevent for a numbered report, the function originally called hidgetreport before performing any size validation. Inside...

CVE-2026-80605: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in picolcdsendandwait In picolcdsendandwait, an integer overflow of the signed loop counter 'k' can theoretically lead to a NULL pointer dereference of 'rawdata'. If the loop execute...

PT-2026-82905

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow of the signed loop counter k in the picolcd send and wait function can lead to a NULL pointer dereference of raw data. This occurs if the loop executes more than INT...

ROS-20260828-73-0016

The vulnerability of the uclogicinputconfigured function in the drivers/hid/hid-uclogic-core.c file of the Linux kernel’s input device subsystem driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2026-82904

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read occurs in the HID core when a caller passes a size of 0 to the hid report raw event function for a numbered report. The system calls the hid get report function...

CVE-2026-80604: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hidgetreport for numbered reports When a caller passes a size of 0 to hidreportrawevent for a numbered report, the function originally called hidgetreport before performing any size validation. Inside...

The vulnerability of the roccat_reportevent() function in the drivers/hid/hid-roccat.c module of the device subsystem of the Linux operating system’s user interface driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the roccatreportevent function in the drivers/hid/hid-roccat.c module of the Linux kernel device subsystem driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

f_hid-4.14-backports

fhid backports for Linux 4.14.190 SM-A525F Three fixes to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098775)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098775 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Add NULL check in mtinputconfigured devmkasprintf can return a NULL pointer on...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098778)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098778 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: roccat: fix use-after-free in roccatreportevent roccatreportevent iterates over the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098751)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098751 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ...

kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq

A flaw was found in the Linux kernel's Wacom Human Interface Device HID driver. This vulnerability allows a remote attacker to trigger an out-of-bounds read by sending a specially crafted, short Bluetooth HID report. This can lead to the disclosure of sensitive information from the system's memor...

The vulnerability of the asus_report_fixup() function in the driver module/hid/hid-asus.c file of the Linux kernel subsystem for user interface devices allows a hacker to cause a service failure.

The vulnerability of the asusreportfixup function in the driver module/hid/hid-asus.c of the Linux kernel device subsystem interface module is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the apple_report_fixup() function in the drivers/hid/hid-apple.c module of the Linux kernel device subsystem allows a hacker to cause a service failure.

The vulnerability of the applereportfixup function in the drivers/hid/hid-apple.c module of the Linux kernel device subsystem driver relates to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `magicmouse_report_fixup()` function in the `drivers/hid/hid-magicmouse.c` driver module of the Linux kernel’s input device subsystem allows a hacker to trigger a maintenance failure.

The vulnerability of the magicmousereportfixup function in the drivers/hid/hid-magicmouse.c driver of the Linux kernel’s input device subsystem relates to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service...