Strix
72.8K

CVE-2026-98501

HIGHCVSS 7.1/10EPSS 0.21%

Last modified

CVE-2026-98501 is a high-severity vulnerability rated 7.1/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix use-after-free on input2 registration failure alps_input_configured() stores data->input2 before calling input_register_device(). If registration fails, input_free_device() frees the input device but data->input2 still points to the freed memory. alps_input_configured() calls hid_hw_open() before allocating input2, so URBs are already active and raw_event can fire during the failure window. A U1_SP_ABSOLUTE_REPORT_ID report arriving then causes u1_raw_event() to dereference the freed data->input2 -> use-after-free. Fix by only storing input2 into drvdata after successful registration and adding a NULL guard in the raw_event path.. EPSS estimates a 0.21% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix use-after-free on input2 registration failure alps_input_configured() stores data->input2 before calling input_register_device(). If registration fails, input_free_device() frees the input device but data->input2 still points to the freed memory. alps_input_configured() calls hid_hw_open() before allocating input2, so URBs are already active and raw_event can fire during the failure window. A U1_SP_ABSOLUTE_REPORT_ID report arriving then causes u1_raw_event() to dereference the freed data->input2 -> use-after-free. Fix by only storing input2 into drvdata after successful registration and adding a NULL guard in the raw_event path.

Metrics

CVSS 3.1
7.1/10

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Probability
0.21%

10.7th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 2562756dde550901c224e3805102bdfc17e7d13a, < 64f824dccfd316fd3db8ea1cc4e8a76ad6a02740; >= 2562756dde550901c224e3805102bdfc17e7d13a, < 2e55d76e6e8a756f6d87c241de975599f82b02fa; >= 2562756dde550901c224e3805102bdfc17e7d13a, < ef8ca5bb4c8b9696f38b1bebce1c851baa02b77b; >= 2562756dde550901c224e3805102bdfc17e7d13a, < 5a8ad63158165bacd6a1d7420e0fe5364c913b06; >= 2562756dde550901c224e3805102bdfc17e7d13a, < 47e5e177e9e4e10da6f2759d5ce8d049e33efdc4; >= 2562756dde550901c224e3805102bdfc17e7d13a, < 925da1d2a24787f24872de13a4680437c54de179; >= 2562756dde550901c224e3805102bdfc17e7d13a, < 443f6b93442b10b972a16f57ceaaea75b77892b6; >= 2562756dde550901c224e3805102bdfc17e7d13a, < d3aba3442798ce4a4c8ce3104d7b286d61e605f9
LinuxLinux4.8

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98501?
In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix use-after-free on input2 registration failure alps_input_configured() stores data->input2 before calling input_register_device(). If registration fails, input_free_device() frees the input device but data->input2 still points to the freed memory. alps_input_configured() calls hid_hw_open() before allocating input2, so URBs are already active and raw_event can fire during the failure window. A U1_SP_ABSOLUTE_REPORT_ID report arriving then causes u1_raw_event() to dereference the freed data->input2 -> use-after-free. Fix by only storing input2 into drvdata after successful registration and adding a NULL guard in the raw_event path.
How severe is CVE-2026-98501?
CVE-2026-98501 has a CVSS score of 7.1/10 (HIGH severity). The EPSS model estimates a 0.21% probability of exploitation in the next 30 days.
How do I fix CVE-2026-98501?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98501?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST