Linux hwe edge: (In the Linux kernel, the following vulnerability has been resolved: H ...) (CVE-2026-80773)

The Linux kernel HID Huawei driver had a missing validation check for the USB parent device. Specifically, the function to_usb_interface() was called without verifying that the hid_device's parent was actually USB via hid_is_usb(). Since uhid can create devices that falsely identify as BUS_USB without a real USB parent, this led to a kernel crash. The issue was confirmed by triggering a kernel splat in an AddressSanitizer (ASAN) build. The vulnerability was fixed by adding the proper hid_is_usb() check before calling to_usb_interface().

This vulnerability could cause a denial of service through a kernel crash when the affected code path is triggered. There is no indication of privilege escalation or code execution. No known exploits are reported in the wild.

A fix is available as the vulnerability has been resolved in the Linux kernel by adding the missing hid_is_usb() check. Users should update to the patched Linux kernel version containing this fix. No other mitigation actions are specified.