AZL-100487 CVE-2026-89623 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: stop device IO before hidhwstop Quiesce device IO at the start of the devm cleanup callback mcp2221hidunregister so that incoming HID reports cannot race with hardware teardown during probe failure or device removal...

UBUNTU-CVE-2026-89623

In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: stop device IO before hidhwstop Quiesce device IO at the start of the devm cleanup callback mcp2221hidunregister so that incoming HID reports cannot race with hardware teardown during probe failure or device removal...

CVE-2026-89622

In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes mcpi2csmbusread stores the caller-supplied buffer pointer in mcp-rxbuf for the duration of a transfer but never clears it when the transfer finishes or times out. Once...

CVE-2026-89623

CVE-2026-89623 affects the Linux kernel's HID mcp2221 driver . During probe failure or device removal, incoming HID reports could race with hardware teardown in the mcp2221_hid_unregister() devm cleanup callback, resulting in a potential use-after-free . The fix quiesces device I/O by calling hid...

CVE-2026-89621 HID: mcp2221: validate report size in mcp2221_raw_event()

In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: validate report size in mcp2221rawevent mcp2221rawevent never validates the size of incoming HID reports. In the MCP2221I2CGETDATA path it trusts the device-supplied data3 as the copy length without checking that 4 ...

The vulnerability of the mcp2221_hid_unregister() function in the driver module/hid/hid-mcp2221.c code of the Linux kernel’s input device subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mcp2221hidunregister function in the driver module/hid/hid-mcp2221.c of the Linux kernel’s input device subsystem relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...