CVE-2026-31625

Katalog CVE

CVSS 5.5 · Medium EPSS 0,17%

Kerentanan NULL Pointer Dereference pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix NULL pointer dereference in alps_raw_event() Commit ecfa6f34492c ("HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them") attempted to fix up the HID drivers that had missed the previous fix that was done in 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at raw event handle"), but the alps driver was missed. Fix this up by properly checking in the hid-alps driver that it had been claimed correctly before attempting to process the raw event.

Rincian

Terbit di NVD

24 April 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,17% peluang dieksploitasi; lebih tinggi dari 5,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/0091dfa542a362c178a7e9393097138a57d327d1 patch
• https://git.kernel.org/stable/c/1badfc4319224820d5d890f8eab6aa52e4e83339 patch
• https://git.kernel.org/stable/c/4b618248d2307a219d9431a730cfe1156c8e3386 patch
• https://git.kernel.org/stable/c/8eed7bce7a4c41ab28ee4891103623a12fd41611 patch
• https://git.kernel.org/stable/c/c8cc765253ad89ccc106a7bdeb5aeac6cf963078 patch
• https://git.kernel.org/stable/c/ee2cb3ddfdca949dbc0c3f796ed5a439f0efc9f6 patch
• https://git.kernel.org/stable/c/56850666bb5dcf7a13d76c5d02864813e17ee537
• https://git.kernel.org/stable/c/72516a8d7fe247fd895424bab87952f105a0c255
• https://git.kernel.org/stable/c/cc411e4823d8bfa23327d9989a0fa4e0ce76aebe