In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix use-after-free on input2 registration failure… (CVE-2026-98501)

The Linux kernel's HID alps driver had a use-after-free vulnerability triggered during input device registration failure. Specifically, alps_input_configured() stored a pointer to input2 before input_register_device() succeeded. If registration failed, input_free_device() freed the input device, but data->input2 still pointed to freed memory. Since URBs were active and raw_event could fire during this window, a U1_SP_ABSOLUTE_REPORT_ID report could cause u1_raw_event() to dereference the freed pointer, leading to use-after-free. The issue was fixed by storing input2 only after successful registration and adding a null guard in the raw_event path.

This vulnerability could lead to use-after-free memory corruption in the Linux kernel, potentially causing system instability or crashes. No specific exploit in the wild is known. The impact is limited to systems running the vulnerable HID alps driver in the Linux kernel.

A fix has been implemented in the Linux kernel to address this use-after-free vulnerability. Users should update to the patched kernel version once available. No additional mitigation is required beyond applying the official fix.