CVE-2026-31625

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-31625", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-03-09T15:48:24.124Z", "datePublished": "2026-04-24T14:42:42.481Z", "dateUpdated": "2026-11-06T15:32:20.295Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-06-14T17:43:14.080Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: alps: fix NULL pointer dereference in alps_raw_event()\n\nCommit ecfa6f34492c (\"HID: Add HID_CLAIMED_INPUT guards in raw_event\ncallbacks missing them\") attempted to fix up the HID drivers that had\nmissed the previous fix that was done in 2ff5baa9b527 (\"HID: appleir:\nFix potential NULL dereference at raw event handle\"), but the alps\ndriver was missed.\n\nFix this up by properly checking in the hid-alps driver that it had been\nclaimed correctly before attempting to process the raw event."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/hid/hid-alps.c"], "versions": [{"version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "lessThan": "56850666bb5dcf7a13d76c5d02864813e17ee537", "status": "affected", "versionType": "git"}, {"version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "lessThan": "72516a8d7fe247fd895424bab87952f105a0c255", "status": "affected", "versionType": "git"}, {"version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "lessThan": "cc411e4823d8bfa23327d9989a0fa4e0ce76aebe", "status": "affected", "versionType": "git"}, {"version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "lessThan": "c8cc765253ad89ccc106a7bdeb5aeac6cf963078", "status": "affected", "versionType": "git"}, {"version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "lessThan": "8eed7bce7a4c41ab28ee4891103623a12fd41611", "status": "affected", "versionType": "git"}, {"version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "lessThan": "0091dfa542a362c178a7e9393097138a57d327d1", "status": "affected", "versionType": "git"}, {"version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "lessThan": "4b618248d2307a219d9431a730cfe1156c8e3386", "status": "affected", "versionType": "git"}, {"version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "lessThan": "ee2cb3ddfdca949dbc0c3f796ed5a439f0efc9f6", "status": "affected", "versionType": "git"}, {"version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "lessThan": "1badfc4319224820d5d890f8eab6aa52e4e83339", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/hid/hid-alps.c"], "versions": [{"version": "4.15", "status": "affected"}, {"version": "0", "lessThan": "4.15", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.258", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.209", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.175", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.136", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.83", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.24", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.14", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.1", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.15", "versionEndExcluding": "5.10.258"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.15", "versionEndExcluding": "5.15.209"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.15", "versionEndExcluding": "6.1.175"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.15", "versionEndExcluding": "6.6.136"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.15", "versionEndExcluding": "6.12.83"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.15", "versionEndExcluding": "6.18.24"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.15", "versionEndExcluding": "6.19.14"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.15", "versionEndExcluding": "7.0.1"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.15", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/56850666bb5dcf7a13d76c5d02864813e17ee537"}, {"url": "https://git.kernel.org/stable/c/72516a8d7fe247fd895424bab87952f105a0c255"}, {"url": "https://git.kernel.org/stable/c/cc411e4823d8bfa23327d9989a0fa4e0ce76aebe"}, {"url": "https://git.kernel.org/stable/c/c8cc765253ad89ccc106a7bdeb5aeac6cf963078"}, {"url": "https://git.kernel.org/stable/c/8eed7bce7a4c41ab28ee4891103623a12fd41611"}, {"url": "https://git.kernel.org/stable/c/0091dfa542a362c178a7e9393097138a57d327d1"}, {"url": "https://git.kernel.org/stable/c/4b618248d2307a219d9431a730cfe1156c8e3386"}, {"url": "https://git.kernel.org/stable/c/ee2cb3ddfdca949dbc0c3f796ed5a439f0efc9f6"}, {"url": "https://git.kernel.org/stable/c/1badfc4319224820d5d890f8eab6aa52e4e83339"}], "title": "HID: alps: fix NULL pointer dereference in alps_raw_event()", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"x_adpType": "supplier", "providerMetadata": {"orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e", "shortName": "siemens-SADP", "dateUpdated": "2026-10-15T01:17:17.626Z"}, "affected": [{"vendor": "Siemens", "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}], "references": [{"url": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html"}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-31625", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T15:22:59.351133Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T15:32:20.295Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"affected": [{"vendor": "Siemens", "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}], "x_adpType": "supplier", "references": [{"url": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html"}], "providerMetadata": {"orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e", "shortName": "siemens-SADP", "dateUpdated": "2026-10-15T01:17:17.626Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-31625", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T15:22:59.351133Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T15:23:00.560Z"}}], "cna": {"title": "HID: alps: fix NULL pointer dereference in alps_raw_event()", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "lessThan": "56850666bb5dcf7a13d76c5d02864813e17ee537", "versionType": "git"}, {"status": "affected", "version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "lessThan": "72516a8d7fe247fd895424bab87952f105a0c255", "versionType": "git"}, {"status": "affected", "version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "lessThan": "cc411e4823d8bfa23327d9989a0fa4e0ce76aebe", "versionType": "git"}, {"status": "affected", "version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "lessThan": "c8cc765253ad89ccc106a7bdeb5aeac6cf963078", "versionType": "git"}, {"status": "affected", "version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "lessThan": "8eed7bce7a4c41ab28ee4891103623a12fd41611", "versionType": "git"}, {"status": "affected", "version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "lessThan": "0091dfa542a362c178a7e9393097138a57d327d1", "versionType": "git"}, {"status": "affected", "version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "lessThan": "4b618248d2307a219d9431a730cfe1156c8e3386", "versionType": "git"}, {"status": "affected", "version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "lessThan": "ee2cb3ddfdca949dbc0c3f796ed5a439f0efc9f6", "versionType": "git"}, {"status": "affected", "version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "lessThan": "1badfc4319224820d5d890f8eab6aa52e4e83339", "versionType": "git"}], "programFiles": ["drivers/hid/hid-alps.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.15"}, {"status": "unaffected", "version": "0", "lessThan": "4.15", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.258", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.209", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.175", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.136", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.83", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.24", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19.14", "versionType": "semver", "lessThanOrEqual": "6.19.*"}, {"status": "unaffected", "version": "7.0.1", "versionType": "semver", "lessThanOrEqual": "7.0.*"}, {"status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/hid/hid-alps.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/56850666bb5dcf7a13d76c5d02864813e17ee537"}, {"url": "https://git.kernel.org/stable/c/72516a8d7fe247fd895424bab87952f105a0c255"}, {"url": "https://git.kernel.org/stable/c/cc411e4823d8bfa23327d9989a0fa4e0ce76aebe"}, {"url": "https://git.kernel.org/stable/c/c8cc765253ad89ccc106a7bdeb5aeac6cf963078"}, {"url": "https://git.kernel.org/stable/c/8eed7bce7a4c41ab28ee4891103623a12fd41611"}, {"url": "https://git.kernel.org/stable/c/0091dfa542a362c178a7e9393097138a57d327d1"}, {"url": "https://git.kernel.org/stable/c/4b618248d2307a219d9431a730cfe1156c8e3386"}, {"url": "https://git.kernel.org/stable/c/ee2cb3ddfdca949dbc0c3f796ed5a439f0efc9f6"}, {"url": "https://git.kernel.org/stable/c/1badfc4319224820d5d890f8eab6aa52e4e83339"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: alps: fix NULL pointer dereference in alps_raw_event()\n\nCommit ecfa6f34492c (\"HID: Add HID_CLAIMED_INPUT guards in raw_event\ncallbacks missing them\") attempted to fix up the HID drivers that had\nmissed the previous fix that was done in 2ff5baa9b527 (\"HID: appleir:\nFix potential NULL dereference at raw event handle\"), but the alps\ndriver was missed.\n\nFix this up by properly checking in the hid-alps driver that it had been\nclaimed correctly before attempting to process the raw event."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.10.258", "versionStartIncluding": "4.15"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.209", "versionStartIncluding": "4.15"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.175", "versionStartIncluding": "4.15"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.136", "versionStartIncluding": "4.15"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.12.83", "versionStartIncluding": "4.15"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.18.24", "versionStartIncluding": "4.15"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.19.14", "versionStartIncluding": "4.15"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.0.1", "versionStartIncluding": "4.15"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.1", "versionStartIncluding": "4.15"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-06-14T17:43:14.080Z"}}}, "cveMetadata": {"cveId": "CVE-2026-31625", "state": "PUBLISHED", "dateUpdated": "2026-11-06T15:32:20.295Z", "dateReserved": "2026-03-09T15:48:24.124Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2026-04-24T14:42:42.481Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/hid/hid-alps.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "56850666bb5dcf7a13d76c5d02864813e17ee537", "status": "affected", "version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "versionType": "git"}, {"lessThan": "72516a8d7fe247fd895424bab87952f105a0c255", "status": "affected", "version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "versionType": "git"}, {"lessThan": "cc411e4823d8bfa23327d9989a0fa4e0ce76aebe", "status": "affected", "version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "versionType": "git"}, {"lessThan": "c8cc765253ad89ccc106a7bdeb5aeac6cf963078", "status": "affected", "version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "versionType": "git"}, {"lessThan": "8eed7bce7a4c41ab28ee4891103623a12fd41611", "status": "affected", "version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "versionType": "git"}, {"lessThan": "0091dfa542a362c178a7e9393097138a57d327d1", "status": "affected", "version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "versionType": "git"}, {"lessThan": "4b618248d2307a219d9431a730cfe1156c8e3386", "status": "affected", "version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "versionType": "git"}, {"lessThan": "ee2cb3ddfdca949dbc0c3f796ed5a439f0efc9f6", "status": "affected", "version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "versionType": "git"}, {"lessThan": "1badfc4319224820d5d890f8eab6aa52e4e83339", "status": "affected", "version": "73196ebe134d11a68a2e27814c489d685cfc8b03", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/hid/hid-alps.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.15"}, {"lessThan": "4.15", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.258", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.209", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.175", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.136", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.83", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.24", "versionType": "semver"}, {"lessThanOrEqual": "6.19.*", "status": "unaffected", "version": "6.19.14", "versionType": "semver"}, {"lessThanOrEqual": "7.0.*", "status": "unaffected", "version": "7.0.1", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"affectedData": [{"defaultStatus": "unknown", "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem", "vendor": "Siemens", "versions": [{"lessThan": "*", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "73306563-4D86-4EFC-8B84-FAF53D5FB6A5", "versionEndExcluding": "6.6.136", "versionStartIncluding": "4.15", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "7F0AE5B5-23AC-4DCC-B37A-51CA1DAE7BA8", "versionEndExcluding": "6.12.83", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "8126B8B8-6D0B-4443-86C1-672AEE893555", "versionEndExcluding": "6.18.24", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "D6A8A074-BBF4-4803-ABED-519A839435BB", "versionEndExcluding": "6.19.14", "versionStartIncluding": "6.19", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "9B5888AB-7403-4335-89E4-21CC0B48366A", "versionEndExcluding": "7.0.1", "versionStartIncluding": "7.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: alps: fix NULL pointer dereference in alps_raw_event()\n\nCommit ecfa6f34492c (\"HID: Add HID_CLAIMED_INPUT guards in raw_event\ncallbacks missing them\") attempted to fix up the HID drivers that had\nmissed the previous fix that was done in 2ff5baa9b527 (\"HID: appleir:\nFix potential NULL dereference at raw event handle\"), but the alps\ndriver was missed.\n\nFix this up by properly checking in the hid-alps driver that it had been\nclaimed correctly before attempting to process the raw event."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nHID: alps: corregir desreferencia de puntero NULL en alps_raw_event()\n\nEl commit ecfa6f34492c (\u2019HID: A\u00f1adir protecciones HID_CLAIMED_INPUT en las devoluciones de llamada raw_event que carecen de ellas\u2019) intent\u00f3 corregir los controladores HID que hab\u00edan omitido la correcci\u00f3n anterior que se realiz\u00f3 en 2ff5baa9b527 (\u2019HID: appleir: Corregir posible desreferencia NULL en el manejador de eventos raw\u2019), pero el controlador alps fue omitido.\n\nCorregir esto comprobando correctamente en el controlador hid-alps que hab\u00eda sido reclamado correctamente antes de intentar procesar el evento raw."}], "id": "CVE-2026-31625", "lastModified": "2026-11-11T23:10:00.263", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-31625", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-06T15:22:59.351133Z", "version": "2.0.3"}}]}, "published": "2026-04-24T15:16:41.807", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0091dfa542a362c178a7e9393097138a57d327d1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/1badfc4319224820d5d890f8eab6aa52e4e83339"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/4b618248d2307a219d9431a730cfe1156c8e3386"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/56850666bb5dcf7a13d76c5d02864813e17ee537"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/72516a8d7fe247fd895424bab87952f105a0c255"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/8eed7bce7a4c41ab28ee4891103623a12fd41611"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/c8cc765253ad89ccc106a7bdeb5aeac6cf963078"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/cc411e4823d8bfa23327d9989a0fa4e0ce76aebe"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/ee2cb3ddfdca949dbc0c3f796ed5a439f0efc9f6"}, {"source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e", "url": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-476"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: HID: alps: fix NULL pointer dereference in alps_raw_event()", "id": "2461470", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461470"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-476", "details": ["A flaw was found in the Linux kernel's HID (Human Interface Device) alps driver. This vulnerability, a NULL pointer dereference, occurs because the driver attempts to process raw events without properly verifying if the device has been claimed. An attacker could potentially exploit this to cause a system crash, leading to a denial of service."], "name": "CVE-2026-31625", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-04-24T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-31625\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31625\nhttps://lore.kernel.org/linux-cve-announce/2026042427-CVE-2026-31625-71c1@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[73196ebe134d11a68a2e27814c489d685cfc8b03,c8cc765253ad89ccc106a7bdeb5aeac6cf963078)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[73196ebe134d11a68a2e27814c489d685cfc8b03,8eed7bce7a4c41ab28ee4891103623a12fd41611)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[73196ebe134d11a68a2e27814c489d685cfc8b03,0091dfa542a362c178a7e9393097138a57d327d1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[73196ebe134d11a68a2e27814c489d685cfc8b03,4b618248d2307a219d9431a730cfe1156c8e3386)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[73196ebe134d11a68a2e27814c489d685cfc8b03,ee2cb3ddfdca949dbc0c3f796ed5a439f0efc9f6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[73196ebe134d11a68a2e27814c489d685cfc8b03,1badfc4319224820d5d890f8eab6aa52e4e83339)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.15"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,4.15)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.6.136,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.12.83,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.18.24,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.19.14,6.20.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.0.1,8.0.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "analysis": {"en": {"generated_at": "2026-04-28T13:57:04.365426+00:00", "value": {"mitigation_remediation": ["Update the Linux kernel to a revision that includes commit ecfa6f34492c or apply the patch manually to the alps driver.", "If an update is not immediately possible, disable the alps HID driver (e.g., blacklist it via modprobe.d or remove the module with modprobe -r).", "Monitor kernel logs such as dmesg and system log files for signs of HID\u2011related crashes and apply the fix as soon as feasible."], "summary": {"action": "Apply Patch", "impact": "Denial of Service"}, "threat_synthesis": {"affected_systems": "Any Linux installation that contains the alps HID driver and has not yet incorporated the guard from commit ecfa6f34492c is vulnerable. This includes all kernel releases before that commit, affecting generic Linux distributions that include the alps driver module. The vulnerability affects only the kernel, not user\u2011space applications.", "description_and_impact": "A NULL pointer dereference occurs in the Linux kernel\u2019s alps HID driver when it processes a raw event that has not been claimed. The flaw, classified as CWE\u2011476, can lead to a kernel crash or panic, effectively denying service for the system. The vendor added a guard in commit ecfa6f34492c to ensure the device is properly claimed before processing, preventing the dereference. Based on the description, it is inferred that an attacker could trigger the problematic raw event by sending crafted HID traffic to the device, which would yield the crash.", "risk_and_exploitability": "The CVSS base score of 5.5 indicates a moderate severity. The EPSS score is less than 1\u202f%, suggesting a low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog, and the fix removes a local denial\u2011of\u2011service vector; exploitation would require local access that can deliver raw HID events to the affected driver. Based on the description, it is inferred that the attack vector is local and requires the ability to send arbitrary HID reports to the device."}}}}, "created": "2026-04-27T18:45:11.327789+00:00", "updated": "2026-04-28T14:00:16.507737+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}