Skip to main content
VulnerabilityPublished Updated

CVE-2026-43152: Linux kernel · HID: hid-pl: handle probe errors

Affects Linux kernelSource CVE Database V5

0
Compare

Not known to be exploited · fixed in 449004434e1f55be85604b2645f2d07c4a92fe53 : update Linux kernel when convenient.

Data as of 6 Nov 2026, 16:03 UTC

Severity
Medium

Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none
CISA SSVC
Exploitation
No evidence of active exploitation and no public proof of concept
Automatable
Attackers cannot reliably automate steps 1–4 of the kill chain
Technical impact
Limited control over the software or limited information exposure

CISA SSVC assessment, 2026-11-06.

Patch
Available – fixed in 449004434e1f55be85604b2645f2d07c4a92fe53, 3756a272d2cf356d2203da8474d173257f5f8521, 926e6715b48b575ed7754bf163a67686bb2eb111 +5

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 6 May 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 6 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 20eb12790670985c8e30821218993bd260387b89, < 449004434e1f55be85604b2645f2d07c4a92fe53
Fixed in
  • 449004434e1f55be85604b2645f2d07c4a92fe53
LinuxLinuxAffected
  • ≥ 20eb12790670985c8e30821218993bd260387b89, < 3756a272d2cf356d2203da8474d173257f5f8521
Fixed in
  • 3756a272d2cf356d2203da8474d173257f5f8521
LinuxLinuxAffected
  • ≥ 20eb12790670985c8e30821218993bd260387b89, < 926e6715b48b575ed7754bf163a67686bb2eb111
Fixed in
  • 926e6715b48b575ed7754bf163a67686bb2eb111
LinuxLinuxAffected
  • ≥ 20eb12790670985c8e30821218993bd260387b89, < 78df3de826668fe842c6061a91bc1ed68f493e80
Fixed in
  • 78df3de826668fe842c6061a91bc1ed68f493e80
LinuxLinuxAffected
  • ≥ 20eb12790670985c8e30821218993bd260387b89, < 8a84149337eb5e716e6d59f48ff0374dae8d8b2b
Fixed in
  • 8a84149337eb5e716e6d59f48ff0374dae8d8b2b
LinuxLinuxAffected
  • ≥ 20eb12790670985c8e30821218993bd260387b89, < 7d2f4fdf134e7398847417b25743e1e04928c7d7
Fixed in
  • 7d2f4fdf134e7398847417b25743e1e04928c7d7

AI-suggested

A fix is available in the Linux kernel as indicated by the presence of fixed commits. Users should update to a kernel version that includes these fixes. No additional mitigation steps are specified.

Description

A vulnerability in the Linux kernel's HID subsystem (hid-pl driver) was fixed to properly handle probe errors. Previously, errors during initialization were not reported correctly, which could lead to a NULL pointer dereference when force feedback (FF) was first used.

References

Community reviews

Loading reviews…