Answer in brief
CVE-2026-23382 records a Unknown severity vulnerability in HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=d0742abaa1c396a26bb3d3ce2732988cd3faa020 <b48284d7f0f76023b215a3409cdc989b5081eadf || >=d0742abaa1c396a26bb3d3ce2732988cd3faa020 <de316c1edf15bc30ff5e0d4c7b37c70fd41cf319 || >=d0742abaa1c396a26bb3d3ce2732988cd3faa020 <ac83b0d91a3f4f0c012ba9c85fb99436cddb1208 || >=d0742abaa1c396a26bb3d3ce2732988cd3faa020 <6e330889e6c8db99f04d4feb861d23de4e8fbb13 || >=d0742abaa1c396a26bb3d3ce2732988cd3faa020 <892dbaf46bb738dacf1fa663eadb3712c85868f0 || >=d0742abaa1c396a26bb3d3ce2732988cd3faa020 <20864e3e41c74cda253a9fa6b6fe093c1461a6a9 || >=d0742abaa1c396a26bb3d3ce2732988cd3faa020 <575122cd6569c4c4aa13c4c9958fea506724c788 || >=d0742abaa1c396a26bb3d3ce2732988cd3faa020 <ecfa6f34492c493a9a1dc2900f3edeb01c79946b | b48284d7f0f76023b215a3409cdc989b5081eadf, de316c1edf15bc30ff5e0d4c7b37c70fd41cf319, ac83b0d91a3f4f0c012ba9c85fb99436cddb1208, 6e330889e6c8db99f04d4feb861d23de4e8fbb13, 892dbaf46bb738dacf1fa663eadb3712c85868f0, 20864e3e41c74cda253a9fa6b6fe093c1461a6a9, 575122cd6569c4c4aa13c4c9958fea506724c788, ecfa6f34492c493a9a1dc2900f3edeb01c79946b |
| Linux/Linuxgeneric | 2.6.35 | Not reported |
| Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystemgeneric | >=0 <* | * |
Published upstream
Mar 25, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 15, 2026
In the Linux kernel, the following vulnerability has been resolved: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them In commit 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at raw event handle"), we handle the fact that raw event callbacks can happen even for a HID device that has not been "claimed" causing a crash if a broken device were attempted to be connected to the system. Fix up the remaining in-tree HID drivers that forgot to add this same check to resolve the same issue.
Quoted source text, attributed separately from HOL analysis.