{"id":"CVE-2026-93826","published":"2026-09-24T17:17:16.297","lastModified":"2026-09-25T13:17:23.403","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: hidpp: fix potential UAF in hidpp_connect_event()\n\nIf input_register_device() fails, we call input_free_device(), but keep\nstale pointer to the old device in hidpp->input, which could potentially\nlead to UAF. Fix that by resetting it to NULL before returning from\nhidpp_connect_event().","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":[],"vendors":[],"products":[],"references":[{"url":"https://git.kernel.org/stable/c/3303398cc2aa255ba251650a30024e11d48ea6c3","tags":[]},{"url":"https://git.kernel.org/stable/c/3b8b2e58b078cd30e121401535541bb8a6d57133","tags":[]},{"url":"https://git.kernel.org/stable/c/6df6b1f2c49678211f65647c300bc51dda02893b","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}