Answer in brief
CVE-2026-31520 records a Unknown severity vulnerability in HID: apple: avoid memory leak in apple_report_fixup(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=6e143293e17a73c9313f91c5ca3aaacbaef030cf <e2f090aeb7b9930a964e151910f4d45b04c8a7e5 || >=6e143293e17a73c9313f91c5ca3aaacbaef030cf <2635d0c715f3fb177e0f80ecd5fa48feb6bf3884 || >=6e143293e17a73c9313f91c5ca3aaacbaef030cf <31860c3f7ac66ab897a8c90dc4e74fa17ca0b624 || >=6e143293e17a73c9313f91c5ca3aaacbaef030cf <be1a341c161430282acdfe2ac99b413271575cf1 || >=6e143293e17a73c9313f91c5ca3aaacbaef030cf <e652ebd29928181c3e6820e303da25873e9917d4 || >=6e143293e17a73c9313f91c5ca3aaacbaef030cf <239c15116d80f67d32f00acc34575f1a6b699613 | e2f090aeb7b9930a964e151910f4d45b04c8a7e5, 2635d0c715f3fb177e0f80ecd5fa48feb6bf3884, 31860c3f7ac66ab897a8c90dc4e74fa17ca0b624, be1a341c161430282acdfe2ac99b413271575cf1, e652ebd29928181c3e6820e303da25873e9917d4, 239c15116d80f67d32f00acc34575f1a6b699613 |
| Linux/Linuxgeneric | 5.17 | Not reported |
Published upstream
Apr 22, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Nov 5, 2026
In the Linux kernel, the following vulnerability has been resolved: HID: apple: avoid memory leak in apple_report_fixup() The apple_report_fixup() function was returning a newly kmemdup()-allocated buffer, but never freeing it. The caller of report_fixup() does not take ownership of the returned pointer, but it *is* permitted to return a sub-portion of the input rdesc, whose lifetime is managed by the caller.
Quoted source text, attributed separately from HOL analysis.