CVE-2026-23382 - Vulnerability Details

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them

In commit 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at
raw event handle"), we handle the fact that raw event callbacks
can happen even for a HID device that has not been "claimed" causing a
crash if a broken device were attempted to be connected to the system.

Fix up the remaining in-tree HID drivers that forgot to add this same
check to resolve the same issue.

Published: 2026-03-25

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

The Linux kernel contains a flaw where raw event callbacks for HID devices can dereference a NULL pointer if a device has not been claimed. The missing guard causes the kernel to crash, resulting in a denial‑of‑service condition. This is a classic null dereference issue classified as CWE‑414.

Affected Systems

All Linux kernel installations that have not incorporated commit 2ff5baa9b527 are affected. The issue was present in drivers such as appleir and other in‑tree HID drivers; any distribution using a kernel older than the supplied fix may be vulnerable.

Risk and Exploitability

The CVSS score of 5.5 reflects a moderate severity, while the EPSS score of less than 1% indicates a low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. Based on the description it is inferred that an attacker would need to present a malformed or unclaimed HID device to the system, potentially through local or remote attachment of such a device, to trigger the crash.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`d0742abaa1c396a26bb3d3ce2732988cd3faa020`	affected	< ac83b0d91a3f4f0c012ba9c85fb99436cddb1208
`d0742abaa1c396a26bb3d3ce2732988cd3faa020`	affected	< 6e330889e6c8db99f04d4feb861d23de4e8fbb13
`d0742abaa1c396a26bb3d3ce2732988cd3faa020`	affected	< 892dbaf46bb738dacf1fa663eadb3712c85868f0
`d0742abaa1c396a26bb3d3ce2732988cd3faa020`	affected	< 20864e3e41c74cda253a9fa6b6fe093c1461a6a9
`d0742abaa1c396a26bb3d3ce2732988cd3faa020`	affected	< 575122cd6569c4c4aa13c4c9958fea506724c788
`d0742abaa1c396a26bb3d3ce2732988cd3faa020`	affected	< ecfa6f34492c493a9a1dc2900f3edeb01c79946b

Linux

affected

Version	Status	Constraints
`2.6.35`	affected	—
`0`	unaffected	< 2.6.35
`6.1.167`	unaffected	≤ 6.1.*
`6.6.130`	unaffected	≤ 6.6.*
`6.12.77`	unaffected	≤ 6.12.*
`6.18.17`	unaffected	≤ 6.18.*
`6.19.7`	unaffected	≤ 6.19.*
`7.0-rc3`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,ac83b0d91a3f4f0c012ba9c85fb99436cddb1208)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,6e330889e6c8db99f04d4feb861d23de4e8fbb13)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,892dbaf46bb738dacf1fa663eadb3712c85868f0)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,20864e3e41c74cda253a9fa6b6fe093c1461a6a9)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,575122cd6569c4c4aa13c4c9958fea506724c788)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,ecfa6f34492c493a9a1dc2900f3edeb01c79946b)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[6.1.167,6.2.0)`	unaffected	semver	—
`[6.6.130,6.7.0)`	unaffected	semver	—
`[6.12.77,6.13.0)`	unaffected	semver	—
`[6.18.17,6.19.0)`	unaffected	semver	—
`[6.19.7,6.20.0)`	unaffected	semver	—
`[7.0-rc3,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Upgrade the Linux kernel to a version that includes commit 2ff5baa9b527, which adds the missing HID_CLAIMED_INPUT guard to raw event callbacks.

Generated by OpenCVE AI on March 26, 2026 at 14:38 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00024.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/20864e3e41c74cda253a9fa6b6fe093c1461a6a9
https://git.kernel.org/stable/c/575122cd6569c4c4aa13c4c9958fea506724c788
https://git.kernel.org/stable/c/6e330889e6c8db99f04d4feb861d23de4e8fbb13
https://git.kernel.org/stable/c/892dbaf46bb738dacf1fa663eadb3712c85868f0
https://git.kernel.org/stable/c/ac83b0d91a3f4f0c012ba9c85fb99436cddb1208
https://git.kernel.org/stable/c/ecfa6f34492c493a9a1dc2900f3edeb01c79946b
https://lore.kernel.org/linux-cve-announce/2026032543-CVE-2026-23382-26fe@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-23382
https://www.cve.org/CVERecord?id=CVE-2026-23382

History

Thu, 26 Mar 2026 12:30:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-476

Thu, 26 Mar 2026 00:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-414
References		https://lore.kernel.org/linux-cve-announce/2026032543-CVE-2026-23382-26fe@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-23382 https://www.cve.org/CVERecord?id=CVE-2026-23382
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Wed, 25 Mar 2026 22:00:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-476

Wed, 25 Mar 2026 10:45:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them In commit 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at raw event handle"), we handle the fact that raw event callbacks can happen even for a HID device that has not been "claimed" causing a crash if a broken device were attempted to be connected to the system. Fix up the remaining in-tree HID drivers that forgot to add this same check to resolve the same issue.
Title		HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/20864e3e41c74cda253a9fa6b6fe093c1461a6a9 https://git.kernel.org/stable/c/575122cd6569c4c4aa13c4c9958fea506724c788 https://git.kernel.org/stable/c/6e330889e6c8db99f04d4feb861d23de4e8fbb13 https://git.kernel.org/stable/c/892dbaf46bb738dacf1fa663eadb3712c85868f0 https://git.kernel.org/stable/c/ac83b0d91a3f4f0c012ba9c85fb99436cddb1208 https://git.kernel.org/stable/c/ecfa6f34492c493a9a1dc2900f3edeb01c79946b

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-03-25T10:28:01.040Z

Updated: 2026-03-25T16:49:16.018Z

Reserved: 2026-01-13T15:37:46.007Z

Link: CVE-2026-23382

Vulnrichment

No data.

NVD

Status : Awaiting Analysis

Published: 2026-03-25T11:16:38.330

Modified: 2026-03-25T15:41:33.977

Link: CVE-2026-23382

Redhat

Severity : Moderate

Publid Date: 2026-03-25T00:00:00Z

Links: CVE-2026-23382 - Bugzilla

OpenCVE Enrichment

Updated: 2026-03-27T09:48:58Z

Weaknesses

CWE-414

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object