CVE-2026-31625
Description
In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix NULL pointer dereference in alps_raw_event() Commit ecfa6f34492c ("HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them") attempted to fix up the HID drivers that had missed the previous fix that was done in 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at raw event handle"), but the alps driver was missed. Fix this up by properly checking in the hid-alps driver that it had been claimed correctly before attempting to process the raw event.
How to fix
- linux linux_kernel6.6.136, 6.12.83, 6.18.24, 6.19.14, 7.0.1 or later
- git.kernel.org/stable/c/0091dfa542a362c178a7e9393097138a57d327d1
- git.kernel.org/stable/c/1badfc4319224820d5d890f8eab6aa52e4e83339
- git.kernel.org/stable/c/4b618248d2307a219d9431a730cfe1156c8e3386
- git.kernel.org/stable/c/8eed7bce7a4c41ab28ee4891103623a12fd41611
- git.kernel.org/stable/c/c8cc765253ad89ccc106a7bdeb5aeac6cf963078
- git.kernel.org/stable/c/ee2cb3ddfdca949dbc0c3f796ed5a439f0efc9f6
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 4.15 ≤ v < 6.6.136, 6.7 ≤ v < 6.12.83, 6.13 ≤ v < 6.18.24, 6.19 ≤ v < 6.19.14, 7.0 ≤ v < 7.0.1 | 6.6.136, 6.12.83, 6.18.24, 6.19.14, 7.0.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.