CVE-2026-80773
Received Received - Intake

HID USB Interface Validation Flaw in Linux Kernel

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: HID: huawei: fix missing hid_is_usb() check to_usb_interface() can only be used on a hid_device whose parent is really USB; uhid can create devices that identify as being on BUS_USB, but don't actually have a USB parent. Fix the use of to_usb_interface() without a hid_is_usb() check. I have verified that it is currently possible to trigger a kernel splat due to this bug in an ASAN build, and that this commit fixes the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-04
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-80773
EUVD
EUVD-2026-71416

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a missing check in the HID (Human Interface Device) driver for Huawei devices. The issue occurs when to_usb_interface() is used without first verifying if the device is actually connected via USB using hid_is_usb(). This can lead to a kernel splat (error message) when the device is not truly on a USB bus, such as when created by uhid.

Detection Guidance

This vulnerability is specific to the Linux kernel's HID subsystem and relates to incorrect handling of USB interfaces. Detection requires checking kernel logs for related errors or kernel splats. Monitor dmesg or journalctl for messages indicating issues with hid-usb or related modules.

Impact Analysis

This vulnerability could cause system instability by triggering kernel errors (kernel splats) when interacting with certain Huawei HID devices. Users might experience crashes or unexpected behavior if the affected devices are used.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this issue. If your distribution has not yet released a patched kernel, consider applying the upstream patch manually or disabling the affected HID modules if not required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80773. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart