21 matches found
EUVD-2026-81992
In the Linux kernel, the following vulnerability has been resolved: HID: asus: refactor the two workqueues and init sequence Multiple issues have been found within the hid-asus driver: - unchecked size in asusrawevent - unclean teardown of asusprobe on failure - possible use-after-free in asuspro...
CVE-2026-90331
CVE-2026-90331 affects the hid-asus driver in the Linux kernel . Multiple defects were identified: an unchecked size in asus_raw_event(), a possible use-after-free in asus_probe, unclean teardown on probe failure, sleeping calls in atomic context , and incorrect packet sizes sent to the keyboard ...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: HID: asus: Avoid a memory leak in asusreportfixup. The asusreportfixup function was returning a buffer allocated using kmemdup, but never freeing that buffer. We’ve switched to using devmkzalloc to ensure that the memory is...
SUSE CVE-2026-80774
In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being on BUSUSB, but don't actually have a USB parent. Fix the use of...
CVE-2026-80774
CVE-2026-80774 affects the Linux kernel in the HID asus driver. The root cause is that to_usb_interface() is called without first verifying the device is genuinely USB via hid_is_usb(). Because the uhid subsystem can create devices that report BUS_USB but lack an actual USB parent, this unchecked...
EUVD-2026-71417
In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being on BUSUSB, but don't actually have a USB parent. Fix the use of...
CVE-2026-80774 HID: asus: fix missing hid_is_usb() check
In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being on BUSUSB, but don't actually have a USB parent. Fix the use of...
PT-2026-85615
In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix missing hid is usb check to usb interface can only be used on a hid device whose parent is really USB; uhid can create devices that identify as being on BUS USB, but don't actually have a USB parent. Fix the use of...
Linux Distros Unpatched Vulnerability : CVE-2026-80774
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: asus: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being ...
The vulnerability of the asus_report_fixup() function in the driver module/hid/hid-asus.c file of the Linux kernel subsystem for user interface devices allows a hacker to cause a service failure.
The vulnerability of the asusreportfixup function in the driver module/hid/hid-asus.c of the Linux kernel device subsystem interface module is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
EUVD-2026-24913
In the Linux kernel, the following vulnerability has been resolved: HID: asus: avoid memory leak in asusreportfixup The asusreportfixup function was returning a newly allocated kmemdup-allocated buffer, but never freeing it. Switch to devmkzalloc to ensure the memory is managed and freed...
CVE-2026-31524 HID: asus: avoid memory leak in asus_report_fixup()
In the Linux kernel, the following vulnerability has been resolved: HID: asus: avoid memory leak in asusreportfixup The asusreportfixup function was returning a newly allocated kmemdup-allocated buffer, but never freeing it. Switch to devmkzalloc to ensure the memory is managed and freed...
PT-2026-34429
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the asus report fixup function, which returns a buffer allocated via kmemdup without subsequently freeing it. Additionally, an out-of-bounds read exists where the...
The vulnerability of the hid-asus.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the hid-asus.c component in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause a service failure...
EUVD-2025-29590
Malicious code in bioql PyPI...
CVE-2025-39824
In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix UAF via HIDCLAIMEDINPUT validation After hidhwstart is called hidinputconnect will eventually be called to set up the device with the input layer since the HIDCONNECTDEFAULT connect mask is used. During...
DEBIAN-CVE-2025-39824
In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix UAF via HIDCLAIMEDINPUT validation After hidhwstart is called hidinputconnect will eventually be called to set up the device with the input layer since the HIDCONNECTDEFAULT connect mask is used. During...
CVE-2025-39824
The CVE CVE-2025-39824 affects the Linux kernel HID subsystem. A crafted HID descriptor can trigger a use-after-free in hid_input handling during hidinput_connect() after hid_hw_start(), notably via ASUS HID devices (e.g., ASUS ROG N-Key keyboard). The root cause is that capability bitmaps may no...
kernel: hid: Use After Free in asus_remove()
A use-after-free flaw was found in asuskbdbacklightset in drivers/hid/hid-asus.c in the Linux Kernel. This issue could allow an attacker to crash the system when plugging in or disconnecting a malicious USB device, which may lead to a kernel information leak problem...
kernel: hid: Use After Free in asus_remove()
A use-after-free flaw was found in asuskbdbacklightset in drivers/hid/hid-asus.c in the Linux Kernel. This issue could allow an attacker to crash the system when plugging in or disconnecting a malicious USB device, which may lead to a kernel information leak problem...