Skip to content
Not rated

CVE-2026-31625 HID: alps: fix NULL pointer dereference in alps_raw_event()

Description

In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix NULL pointer dereference in alps_raw_event() Commit ecfa6f34492c ("HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them") attempted to fix up the HID drivers that had missed the previous fix that was done in 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at raw event handle"), but the alps driver was missed. Fix this up by properly checking in the hid-alps driver that it had been claimed correctly before attempting to process the raw event.

Affected products and versions

Product Affected versions Fixed in
Linux 7.1 earliest → < 7.1 7.1
Linux 7.0 earliest → < 7.0.1 7.0.1
Linux 6.19 earliest → < 6.19.14 6.19.14
Linux 6.18 earliest → < 6.18.24 6.18.24
Linux 6.12 earliest → < 6.12.83 6.12.83
Linux 6.6 earliest → < 6.6.136 6.6.136
Linux 6.1 earliest → < 6.1.175 6.1.175
Linux 5.15 earliest → < 5.15.209 5.15.209
Linux 5.10 earliest → < 5.10.258 5.10.258
Show the 2 other branches
Product Affected versions Fixed in
Linux 4.15 No fix stated
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem Versions not published
The 18286 CVEs of Linux →
Track this CVE