CVE-2026-80918
Description
A flaw was found in the Linux kernel's Human Interface Device (HID) core. When a specially crafted HID device is connected, a type confusion vulnerability can occur during the processing of its descriptor. This allows the kernel to incorrectly interpret a memory address as a numerical value, leading to the disclosure of sensitive kernel pointer information in system logs. This information could potentially be used by an attacker to bypass security measures.
Statement
This vulnerability is rated with a Low severity because exploitation requires local or physical interaction to attach a malformed peripheral, and the blast radius is restricted to disclosing partial kernel memory addresses into system diagnostic logs. In typical Red Hat Enterprise Linux enterprise deployments, systems operate in restricted physical environments or virtualized infrastructures where unauthorized hardware insertion is prevented. While virtualized environments permitting device passthrough or emulation may expose the interface, the leaked address fragment alone does not compromise host stability or directly grant elevated privileges.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.5 | N/A | N/A |
| Attack Vector | Local | N/A | N/A |
| Attack Complexity | Low | N/A | N/A |
| Privileges Required | Low | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | None | N/A | N/A |
| Integrity Impact | None | N/A | N/A |
| Availability Impact | High | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
