CVE-2026-80767
Received Received - Intake

Use-After-Free in Linux Kernel HID Sensor Driver

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: HID: sensor: custom: Fix use-after-free in enable_sensor enable_sensor_store() can call set_power_report_state(), which dereferences sensor_inst->power_state and sensor_inst->report_state. These pointers refer to entries in sensor_inst->fields. Create the field attributes before exposing the enable_sensor sysfs attribute, so enable_sensor cannot be accessed before the state it depends on has been initialized. On remove, delete enable_sensor before freeing the field attributes, so a concurrent sysfs write cannot dereference freed memory through power_state or report_state.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-04
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-80767
EUVD
EUVD-2026-71410

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a use-after-free vulnerability in the Linux kernel's HID sensor driver. It occurs in the enable_sensor_store() function which accesses sensor_inst->power_state and sensor_inst->report_state pointers that point to entries in sensor_inst->fields. The issue arises when enable_sensor is accessed before field attributes are created or when enable_sensor is deleted after freeing field attributes, allowing concurrent sysfs writes to dereference freed memory.

Detection Guidance

This vulnerability is specific to the Linux kernel's HID sensor subsystem and requires kernel code inspection or runtime detection. No direct network detection commands exist. Check kernel logs for crashes or use kernel debugging tools like ftrace or KASAN to detect use-after-free events in the HID sensor module.

Impact Analysis

This vulnerability could allow an attacker with local access to cause a system crash or potentially execute arbitrary code with kernel privileges by triggering a use-after-free condition through the HID sensor interface.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for CVE-2026-80767. If immediate patching is not possible, disable the HID sensor custom module by blacklisting it or removing the module until the update is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80767. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart