CVE-2026-43251

Medium

Published: —Translated: 17/06/2026(UTC)NVD NIST

Summary

A vulnerability has been identified in the Linux kernel related to the handling of fake USB devices that can send their own report descriptors. If the input_mapping() hook is not called, the pm->input_ep82 pointer remains NULL, leading to a system crash.

Risk Assessment

This vulnerability may lead to system crashes, affecting the availability of services within the organization. Fake USB devices could be used to trigger unforeseen stability issues.

Recommendation

It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability. Additionally, monitor connected USB devices and implement appropriate security measures.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: HID: prodikeys: Check presence of pm->input_ep82 Fake USB devices can send their own report descriptors for which the input_mapping() hook does not get called. In this case, pm->input_ep82 stays NULL, which leads to a crash later