CVE-2026-43140

HID: magicmouse: Do not crash on missing msc->input

State: Published
Severity: Not scored
Published: May 6, 2026
Updated: May 11, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: magicmouse: Do not crash on missing msc->input

Fake USB devices can send their own report descriptors for which the input_mapping() hook does not get called. In this case, msc->input stays NULL, leading to a crash at a later time.

Detect this condition in the input_configured() hook and reject the device.

This is not supposed to happen with actual magic mouse devices, but can be provoked by imposing as a magic mouse USB device.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	64eb105d7f92fa48798106ac0d8bf17668eb2524 to before db5ba06e7af9325519a03e52fccf4a9e7c1fd9b2Affected 64eb105d7f92fa48798106ac0d8bf17668eb2524 to before 165912d4321c692321c02793068d30700b4e0f1aAffected 64eb105d7f92fa48798106ac0d8bf17668eb2524 to before f6a3860241fbb556fd72332fa31c5e787004413bAffected 64eb105d7f92fa48798106ac0d8bf17668eb2524 to before 243e1165eb03aca97d87aafa9c3130593837a1c2Affected 64eb105d7f92fa48798106ac0d8bf17668eb2524 to before 922bd3e498a4b8e445def6e6ffea2ad3682ad516Affected 64eb105d7f92fa48798106ac0d8bf17668eb2524 to before 5bbe266272d86c0657e8253600f3d5b74fb7b2aeAffected 64eb105d7f92fa48798106ac0d8bf17668eb2524 to before 36c83c1329dd881f290f7df2feadfb9a21775108Affected 64eb105d7f92fa48798106ac0d8bf17668eb2524 to before 17abd396548035fbd6179ee1a431bd75d49676a7Affected
LinuxLinux	2.6.37Affected before 2.6.37Not affected 5.10.252 through 5.10.Not affected 5.15.202 through 5.15.Not affected 6.1.165 through 6.1.Not affected 6.6.128 through 6.6.Not affected 6.12.75 through 6.12.Not affected 6.18.16 through 6.18.Not affected 6.19.6 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

64eb105d7f92fa48798106ac0d8bf17668eb2524 to before db5ba06e7af9325519a03e52fccf4a9e7c1fd9b2Affected
64eb105d7f92fa48798106ac0d8bf17668eb2524 to before 165912d4321c692321c02793068d30700b4e0f1aAffected
64eb105d7f92fa48798106ac0d8bf17668eb2524 to before f6a3860241fbb556fd72332fa31c5e787004413bAffected
64eb105d7f92fa48798106ac0d8bf17668eb2524 to before 243e1165eb03aca97d87aafa9c3130593837a1c2Affected
64eb105d7f92fa48798106ac0d8bf17668eb2524 to before 922bd3e498a4b8e445def6e6ffea2ad3682ad516Affected
64eb105d7f92fa48798106ac0d8bf17668eb2524 to before 5bbe266272d86c0657e8253600f3d5b74fb7b2aeAffected
64eb105d7f92fa48798106ac0d8bf17668eb2524 to before 36c83c1329dd881f290f7df2feadfb9a21775108Affected
64eb105d7f92fa48798106ac0d8bf17668eb2524 to before 17abd396548035fbd6179ee1a431bd75d49676a7Affected

LinuxLinux

2.6.37Affected
before 2.6.37Not affected
5.10.252 through 5.10.*Not affected
5.15.202 through 5.15.*Not affected
6.1.165 through 6.1.*Not affected
6.6.128 through 6.6.*Not affected
6.12.75 through 6.12.*Not affected
6.18.16 through 6.18.*Not affected
6.19.6 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.