Към съдържанието

CVE-2026-43140: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: Do not crash on missing msc->input Fake USB devices can send their own report descriptors for which the input_mapping() hook does not get called. In this case, msc->input stays NULL, leading to a crash at a later time. Detect this condition in the input_configured() hook and reject the device. This is not supposed to happen with actual magic mouse devices, but can be provoked by imposing as a magic mouse USB device.

    Засегнати продукти

    • Linux Linux: 64eb105d7f92fa48798106ac0d8bf17668eb2524 преди db5ba06e7af9325519a03e52fccf4a9e7c1fd9b2; 64eb105d7f92fa48798106ac0d8bf17668eb2524 преди 165912d4321c692321c02793068d30700b4e0f1a; 64eb105d7f92fa48798106ac0d8bf17668eb2524 преди f6a3860241fbb556fd72332fa31c5e787004413b; 64eb105d7f92fa48798106ac0d8bf17668eb2524 преди 243e1165eb03aca97d87aafa9c3130593837a1c2; 64eb105d7f92fa48798106ac0d8bf17668eb2524 преди 922bd3e498a4b8e445def6e6ffea2ad3682ad516; 64eb105d7f92fa48798106ac0d8bf17668eb2524 преди 5bbe266272d86c0657e8253600f3d5b74fb7b2ae; 64eb105d7f92fa48798106ac0d8bf17668eb2524 преди 36c83c1329dd881f290f7df2feadfb9a21775108; 64eb105d7f92fa48798106ac0d8bf17668eb2524 преди 17abd396548035fbd6179ee1a431bd75d49676a7
    • Linux Linux: 2.6.37; преди 2.6.37; 5.10.252 до 5.10.*; 5.15.202 до 5.15.*; 6.1.165 до 6.1.*; 6.6.128 до 6.6.*; 6.12.75 до 6.12.*; 6.18.16 до 6.18.*; 6.19.6 до 6.19.*; от 7.0 нататък

    История

    • 6 май 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-43140: Linux | freedomonline.bg