The vulnerability of the input_register_handler() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the inputregisterhandler function in the Linux operating system is related to memory management errors after memory is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-38394

The CVE-2025-38394 issue is in the Linux kernel HID path (appletkd/b appletb-kbd) where an input handler is registered to input core and then, if probe fails, freed memory remains in input_handler_list. This creates a use‑after‑free condition (UAF) in input_attach_handler during subsequent device...