CVE-2026-80774

Not scored yetLast modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: asus: fix missing hid_is_usb() check

to_usb_interface() can only be used on a hid_device whose parent is really USB; uhid can create devices that identify as being on BUS_USB, but don't actually have a USB parent. Fix the use of to_usb_interface() without a hid_is_usb() check.

I have verified that it is currently possible to trigger a kernel splat due to this bug in an ASAN build, and that this commit fixes the issue.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= ff38cf0bd888fe15789a7193d07c4a876388d520, < bdb2e0a2a359e473ca5619e35adee89028697239; >= 00e005c952f74f50a3f86af96f56877be4685e14, < 8b5debb6252cd1e2b6c7adf8f95761a0e743d2cf; >= 00e005c952f74f50a3f86af96f56877be4685e14, < 1ddc2f5913bec7a846544d51a8f7a8119573b2a1; >= 00e005c952f74f50a3f86af96f56877be4685e14, < ee883906cf6685d753af9c2d2ca9fd6f63197726; >= 00e005c952f74f50a3f86af96f56877be4685e14, < 02bf61dfb44f17ec187d1da1a82495951bbd12df; 02d5431198f10e7c6e31f4138c14cfe400ec55a7; >= 6.12.35, < 6.12.108; >= 6.15.4, < 6.16
LinuxLinux6.16

References

Timeline

Published
Sep 4, 2026
Last modified
Oct 19, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-80775In the Linux kernel, the following vulnerability has been resolved: futex: Fix race on the initial mm->futex.phash.ref allocation futex_haCVE-2026-80776In the Linux kernel, the following vulnerability has been resolved: futex: Fix race in futex_pivot_pending() during private hash resize A CVE-2026-80777In the Linux kernel, the following vulnerability has been resolved: futex/pi: Plug private futex exec() race The check for private futexesCVE-2026-80778In the Linux kernel, the following vulnerability has been resolved: futex/pi: Reject cross-mm private futex owners A private futex key borCVE-2026-80779In the Linux kernel, the following vulnerability has been resolved: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ The dedicated hCVE-2026-80784.8Stored cross-site scripting in the global settings change log in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an adCVE-2026-80780In the Linux kernel, the following vulnerability has been resolved: HID: pidff: fix OOB write when hid->inputs is empty hid_pidff_init_witCVE-2026-80781In the Linux kernel, the following vulnerability has been resolved: HID: core: fix OOB read of field->usage in hid_set_field() hid_set_fieCVE-2026-80782In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: do not keep a stale msc->input if no input is claimed CVE-2026-80783In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() CVE-2026-80784In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix memory leak from alloc-during-teardown race mptcp_pm_deCVE-2026-80785In the Linux kernel, the following vulnerability has been resolved: fbdev: serialize mode sysfs access with lock_fb_info() show_mode(), sh
CVE-2026-80774: Unscored | Vulnix