{"id":"CVE-2026-93826","revision":"a9c146d2db8d41e98b8da8b8a4c56a10","records":[{"revision":"a9c146d2db8d41e98b8da8b8a4c56a10","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-93826","aliases":[],"title":"HID: hidpp: fix potential UAF in hidpp_connect_event()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: hidpp: fix potential UAF in hidpp_connect_event()\n\nIf input_register_device() fails, we call input_free_device(), but keep\nstale pointer to the old device in hidpp->input, which could potentially\nlead to UAF. Fix that by resetting it to NULL before returning from\nhidpp_connect_event().","state":0,"publishedAt":"2026-09-24T16:03:04.711+00:00","modifiedAt":"2026-10-03T10:57:57.986+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/hid/hid-logitech-hidpp.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"c39e3d5fc9dd3e16c6f59dd94d827540040de66d\",\n                            \"lessThan\": \"e03fd646adad7f97fa4429ec5f38cee9bde5276e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c39e3d5fc9dd3e16c6f59dd94d827540040de66d\",\n                            \"lessThan\": \"5d7637f4d050d105177217e64b869f56f9825060\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c39e3d5fc9dd3e16c6f59dd94d827540040de66d\",\n                            \"lessThan\": \"3b8b2e58b078cd30e121401535541bb8a6d57133\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c39e3d5fc9dd3e16c6f59dd94d827540040de66d\",\n                            \"lessThan\": \"3303398cc2aa255ba251650a30024e11d48ea6c3\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c39e3d5fc9dd3e16c6f59dd94d827540040de66d\",\n                            \"lessThan\": \"6df6b1f2c49678211f65647c300bc51dda02893b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/hid/hid-logitech-hidpp.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"3.19\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"3.19\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.189\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.158\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.111\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.53\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","score":7.5,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/e03fd646adad7f97fa4429ec5f38cee9bde5276e","https://git.kernel.org/stable/c/5d7637f4d050d105177217e64b869f56f9825060","https://git.kernel.org/stable/c/3b8b2e58b078cd30e121401535541bb8a6d57133","https://git.kernel.org/stable/c/3303398cc2aa255ba251650a30024e11d48ea6c3","https://git.kernel.org/stable/c/6df6b1f2c49678211f65647c300bc51dda02893b"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93826","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-93826","identifiers":["CVE-2026-93826"]},"retained":false,"historicalAffected":[]}],"coverage":[]}