CVE-2026-43152: Linux kernel · HID: hid-pl: handle probe errors
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in 449004434e1f55be85604b2645f2d07c4a92fe53 : update Linux kernel when convenient.
Data as of 6 Nov 2026, 16:03 UTC
Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
Thin evidence
One scorer or none- CISA SSVC
- Exploitation
- No evidence of active exploitation and no public proof of concept
- Automatable
- Attackers cannot reliably automate steps 1–4 of the kill chain
- Technical impact
- Limited control over the software or limited information exposure
CISA SSVC assessment, 2026-11-06.
- Patch
- Available – fixed in 449004434e1f55be85604b2645f2d07c4a92fe53, 3756a272d2cf356d2203da8474d173257f5f8521, 926e6715b48b575ed7754bf163a67686bb2eb111 +5
Exploitation evidence
Disclosed: evidence found.
CVE published 6 May 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 6 Nov 2026.
What to do
Upgrade to a fixed release listed under Affected software.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
AI-suggested
A fix is available in the Linux kernel as indicated by the presence of fixed commits. Users should update to a kernel version that includes these fixes. No additional mitigation steps are specified.
Description
A vulnerability in the Linux kernel's HID subsystem (hid-pl driver) was fixed to properly handle probe errors. Previously, errors during initialization were not reported correctly, which could lead to a NULL pointer dereference when force feedback (FF) was first used.
References
- git.kernel.org/stable/c/78df3de826668fe842c6061a91bc1ed68f493e80 (opens in a new tab)
- git.kernel.org/stable/c/8a84149337eb5e716e6d59f48ff0374dae8d8b2b (opens in a new tab)
- git.kernel.org/stable/c/926e6715b48b575ed7754bf163a67686bb2eb111 (opens in a new tab)
- git.kernel.org/stable/c/449004434e1f55be85604b2645f2d07c4a92fe53 (opens in a new tab)
- git.kernel.org/stable/c/04e50f45b5175bb90a06f5003113cb4ed6ba44c2 (opens in a new tab)
- git.kernel.org/stable/c/1d46d07458dba369daf61fb643d40a62c8423d8e (opens in a new tab)
- git.kernel.org/stable/c/7d2f4fdf134e7398847417b25743e1e04928c7d7 (opens in a new tab)
- git.kernel.org/stable/c/3756a272d2cf356d2203da8474d173257f5f8521 (opens in a new tab)