HomeDefectsLIN1025-8682
Acknowledged

LIN1025-8682 : Security Advisory - linux - CVE-2026-23382

Created: Mar 26, 2026    Updated: Mar 31, 2026
Found In Version: 10.25.33.2
Severity: Standard
Applicable for: Wind River Linux LTS 25
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them  In commit 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at raw event handle"), we handle the fact that raw event callbacks can happen even for a HID device that has not been "claimed" causing a crash if a broken device were attempted to be connected to the system.  Fix up the remaining in-tree HID drivers that forgot to add this same check to resolve the same issue.