In the Linux kernel, the following vulnerability has been resolved: Input: ati_remote2 - fix type confusion in device attribute handlers Previously,… (CVE-2026-99069)

The vulnerability in the Linux kernel's ati_remote2 input driver involved a type confusion in device attribute handlers. Originally, channel_mask and mode_mask attributes were registered on the parent usb_device. After a code change to use the driver core for device attribute management, these attributes moved to usb_interface devices, but the show and store callbacks were not updated accordingly. They continued to invoke to_usb_device() on usb_interface pointers, resulting in invalid usb_device pointers. The fix involved changing the attribute handlers to use to_usb_interface() to correctly obtain the interface and its driver data.

The vulnerability caused invalid pointer usage in device attribute handlers, which could lead to kernel instability or crashes. No specific exploit or active exploitation is reported. The impact is limited to the affected driver within the Linux kernel input subsystem.

A fix has been implemented in the Linux kernel source code to correct the attribute handlers. Users should update to a Linux kernel version that includes this fix. Patch status is not explicitly stated in the input data, so check the vendor advisory or kernel release notes for the exact fixed version.