Answer in brief
CVE-2026-31625 records a Unknown severity vulnerability in HID: alps: fix NULL pointer dereference in alps_raw_event(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=73196ebe134d11a68a2e27814c489d685cfc8b03 <56850666bb5dcf7a13d76c5d02864813e17ee537 || >=73196ebe134d11a68a2e27814c489d685cfc8b03 <72516a8d7fe247fd895424bab87952f105a0c255 || >=73196ebe134d11a68a2e27814c489d685cfc8b03 <cc411e4823d8bfa23327d9989a0fa4e0ce76aebe || >=73196ebe134d11a68a2e27814c489d685cfc8b03 <c8cc765253ad89ccc106a7bdeb5aeac6cf963078 || >=73196ebe134d11a68a2e27814c489d685cfc8b03 <8eed7bce7a4c41ab28ee4891103623a12fd41611 || >=73196ebe134d11a68a2e27814c489d685cfc8b03 <0091dfa542a362c178a7e9393097138a57d327d1 || >=73196ebe134d11a68a2e27814c489d685cfc8b03 <4b618248d2307a219d9431a730cfe1156c8e3386 || >=73196ebe134d11a68a2e27814c489d685cfc8b03 <ee2cb3ddfdca949dbc0c3f796ed5a439f0efc9f6 || >=73196ebe134d11a68a2e27814c489d685cfc8b03 <1badfc4319224820d5d890f8eab6aa52e4e83339 | 56850666bb5dcf7a13d76c5d02864813e17ee537, 72516a8d7fe247fd895424bab87952f105a0c255, cc411e4823d8bfa23327d9989a0fa4e0ce76aebe, c8cc765253ad89ccc106a7bdeb5aeac6cf963078, 8eed7bce7a4c41ab28ee4891103623a12fd41611, 0091dfa542a362c178a7e9393097138a57d327d1, 4b618248d2307a219d9431a730cfe1156c8e3386, ee2cb3ddfdca949dbc0c3f796ed5a439f0efc9f6, 1badfc4319224820d5d890f8eab6aa52e4e83339 |
| Linux/Linuxgeneric | 4.15 | Not reported |
| Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystemgeneric | >=0 <* | * |
Published upstream
Apr 24, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 15, 2026
In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix NULL pointer dereference in alps_raw_event() Commit ecfa6f34492c ("HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them") attempted to fix up the HID drivers that had missed the previous fix that was done in 2ff5baa9b527 ("HID: appleir: Fix potential NULL dereference at raw event handle"), but the alps driver was missed. Fix this up by properly checking in the hid-alps driver that it had been claimed correctly before attempting to process the raw event.
Quoted source text, attributed separately from HOL analysis.