What’s Vulnerable › Vulnerabilities

CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event()

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-24 · updated 2026-10-03

Description

In the Linux kernel, the following vulnerability has been resolved: HID: hidpp: fix potential UAF in hidpp_connect_event() If input_register_device() fails, we call input_free_device(), but keep stale pointer to the old device in hidpp->input, which could potentially lead to UAF. Fix that by resetting it to NULL before returning from hidpp_connect_event().

Affected products

• Linux kernel: 3.19 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

In the news

• ZDI-26-835: Linux Kernel Logitech HIDPP Protocol Use-After-Free Local Privilege Escalation Vulnerability

References

• https://git.kernel.org/stable/c/3303398cc2aa255ba251650a30024e11d48ea6c3
• https://git.kernel.org/stable/c/3b8b2e58b078cd30e121401535541bb8a6d57133
• https://git.kernel.org/stable/c/5d7637f4d050d105177217e64b869f56f9825060
• https://git.kernel.org/stable/c/6df6b1f2c49678211f65647c300bc51dda02893b
• https://git.kernel.org/stable/c/e03fd646adad7f97fa4429ec5f38cee9bde5276e

Get alerted when CVE-2026-93826 or the next vulnerability affects your stack