HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them

Description

A vulnerability labeled as critical has been found in Linux Kernel up to 7.0-rc2. Impacted is an unknown function of the component HID. Such manipulation leads to null pointer dereference. This vulnerability is documented as CVE-2026-23382. The attack requires being on the local network. The affected component should be upgraded.

Affected Products

References

• https://git.kernel.org/stable/c/ac83b0d91a3f4f0c012ba9c85fb99436cddb1208
• https://git.kernel.org/stable/c/6e330889e6c8db99f04d4feb861d23de4e8fbb13
• https://git.kernel.org/stable/c/892dbaf46bb738dacf1fa663eadb3712c85868f0
• https://git.kernel.org/stable/c/20864e3e41c74cda253a9fa6b6fe093c1461a6a9
• https://git.kernel.org/stable/c/575122cd6569c4c4aa13c4c9958fea506724c788
• https://git.kernel.org/stable/c/ecfa6f34492c493a9a1dc2900f3edeb01c79946b

Related News (2 articles)