Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098751)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098751 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098775)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098775 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Add NULL check in mtinputconfigured devmkasprintf can return a NULL pointer on...

kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq

A flaw was found in the Linux kernel's Wacom Human Interface Device HID driver. This vulnerability allows a remote attacker to trigger an out-of-bounds read by sending a specially crafted, short Bluetooth HID report. This can lead to the disclosure of sensitive information from the system's memor...

The vulnerability of the asus_report_fixup() function in the driver module/hid/hid-asus.c file of the Linux kernel subsystem for user interface devices allows a hacker to cause a service failure.

The vulnerability of the asusreportfixup function in the driver module/hid/hid-asus.c of the Linux kernel device subsystem interface module is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the read_dma_buffer() function in the drivers/hid/intel-thc-hid/intel-thc/intel-thc-dma.c driver module of the Linux kernel’s input device subsystem allows a hacker to cause a service failure.

The vulnerability of the readdmabuffer function in the drivers/hid/intel-thc-hid/intel-thc/intel-thc-dma.c file of the Linux kernel subsystem for controlling peripheral devices is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the apple_report_fixup() function in the drivers/hid/hid-apple.c module of the Linux kernel device subsystem allows a hacker to cause a service failure.

The vulnerability of the applereportfixup function in the drivers/hid/hid-apple.c module of the Linux kernel device subsystem driver relates to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `magicmouse_report_fixup()` function in the `drivers/hid/hid-magicmouse.c` driver module of the Linux kernel’s input device subsystem allows a hacker to trigger a maintenance failure.

The vulnerability of the magicmousereportfixup function in the drivers/hid/hid-magicmouse.c driver of the Linux kernel’s input device subsystem relates to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: fix NULL-pointer dereferences There are several situations in which the kernel can crash when requests are made to unbind the GPIO device and then system calls related to the GPIO character device’s anonymous file...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

BlueZ HID over GATT Profile: Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected BlueZ installations. Authentication is not required to exploit this vulnerability. The specific flaw lies in the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel version up to 6.1.9, there is a use-after-free issue in the bigbenremove function within the drivers/hid/hid-bigbenff.c file, caused by a crafted USB device. This issue arises because the LED controllers remain registered for an excessively long period of time...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: HID: cp2112: prevented a buffer overflow in cp2112xfer Match warnings: drivers/hid/hid-cp2112.c:793 cp2112xfer error: memcpy 'data-block1' is too small 33 vs 255 drivers/hid/hid-cp2112.c:793 cp2112xfer error: memcpy 'buf' is t...

Astra Linux – Vulnerability in Chromium

Memory access out of bounds in WebHID in Google Chrome prior to version 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption through a malicious HID device. Chromium security severity: High...

Astra Linux – Vulnerability in Linux, Linux 5.10

In lgprobe and related functions of hid-lg.c and other USB HID files, there is a possible out-of-bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device is connected, without the need for additional execution privileges. User...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ACPI: Processor: Idle: Check the return value of acpiFetchAcpiDev. The return value of acpiFetchAcpiDev can be NULL, which could lead to a NULL pointer dereferencing in acpiDeviceHID. rjw: Subject and changelog edits, added an...

Astra Linux – Vulnerability in Linux

In hidinputchangeresolutionmultipliers of hid-input.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to a local privilege escalation without the need for additional execution privileges. User interaction is not required for exploitation. Product: Android...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: HID: Multitouch: Corrected the reference to the devm device for the hidinput inputdev name. The reference should point to the HID device, rather than the input device, for the allocation of the inputdev name. Referring to the...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Fixed a potential use-after-free issue in the work function. When a reset notify IPC message is received, the ISR schedules a work function and passes the ISHTP device to it via a global pointer called...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: HID: core: fix shift-out-of-bounds in hidreportrawevent Syzbot reported a shift-out-of-bounds issue in hidreportrawevent. microsoft 0003:045E:07DA.0001: hidfieldextract called with n 128 32! swapper/0 UBSAN: shift-out-of-bounds i...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: fixed a possible memory leak in mousevscprobe If hidadddevice returns an error, it should call hiddestroydevice to free the hiddev that was allocated in hidallocatedevice...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: hid: cp2112: Fix duplicate workqueue initialization Previously, the cp2112 driver called INITDELAYEDWORK within cp2112 gpioirqstartup, resulting in duplicate initializations of the workqueue during subsequent IRQ starts after an...