CVE-2026-43251

HID: prodikeys: Check presence of pm->input_ep82

State: Published
Severity: Not scored
Published: May 6, 2026
Updated: May 11, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: prodikeys: Check presence of pm->input_ep82

Fake USB devices can send their own report descriptors for which the input_mapping() hook does not get called. In this case, pm->input_ep82 stays NULL, which leads to a crash later.

This does not happen with the real device, but can be provoked by imposing as one.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	3a370ca1dcf8c80aff7a0a21d6b0f50ca2a151e9 to before f580c79683356632f12f2c2029f2fe936d953aa1Affected 3a370ca1dcf8c80aff7a0a21d6b0f50ca2a151e9 to before ee572578f09f0e743e9383393a75c3a7a0f9b4c2Affected 3a370ca1dcf8c80aff7a0a21d6b0f50ca2a151e9 to before edccbf7d6dc05d692bde3a89de5a4001f72a0fa4Affected 3a370ca1dcf8c80aff7a0a21d6b0f50ca2a151e9 to before 3f1b21cc67a15d7d081378a9b8747dd000a017b8Affected 3a370ca1dcf8c80aff7a0a21d6b0f50ca2a151e9 to before e7ac1cd823cd2e9fcbd5cb0b261d6d35dbb79341Affected 3a370ca1dcf8c80aff7a0a21d6b0f50ca2a151e9 to before d5512ce892f774d37c53082adadfcad04f21b50eAffected 3a370ca1dcf8c80aff7a0a21d6b0f50ca2a151e9 to before d08f35f843881ec504d7537a9bb728a073db3366Affected 3a370ca1dcf8c80aff7a0a21d6b0f50ca2a151e9 to before cee8337e1bad168136aecfe6416ecd7d3aa7529aAffected
LinuxLinux	2.6.35Affected before 2.6.35Not affected 5.10.252 through 5.10.Not affected 5.15.202 through 5.15.Not affected 6.1.165 through 6.1.Not affected 6.6.128 through 6.6.Not affected 6.12.75 through 6.12.Not affected 6.18.16 through 6.18.Not affected 6.19.6 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

3a370ca1dcf8c80aff7a0a21d6b0f50ca2a151e9 to before f580c79683356632f12f2c2029f2fe936d953aa1Affected
3a370ca1dcf8c80aff7a0a21d6b0f50ca2a151e9 to before ee572578f09f0e743e9383393a75c3a7a0f9b4c2Affected
3a370ca1dcf8c80aff7a0a21d6b0f50ca2a151e9 to before edccbf7d6dc05d692bde3a89de5a4001f72a0fa4Affected
3a370ca1dcf8c80aff7a0a21d6b0f50ca2a151e9 to before 3f1b21cc67a15d7d081378a9b8747dd000a017b8Affected
3a370ca1dcf8c80aff7a0a21d6b0f50ca2a151e9 to before e7ac1cd823cd2e9fcbd5cb0b261d6d35dbb79341Affected
3a370ca1dcf8c80aff7a0a21d6b0f50ca2a151e9 to before d5512ce892f774d37c53082adadfcad04f21b50eAffected
3a370ca1dcf8c80aff7a0a21d6b0f50ca2a151e9 to before d08f35f843881ec504d7537a9bb728a073db3366Affected
3a370ca1dcf8c80aff7a0a21d6b0f50ca2a151e9 to before cee8337e1bad168136aecfe6416ecd7d3aa7529aAffected

LinuxLinux

2.6.35Affected
before 2.6.35Not affected
5.10.252 through 5.10.*Not affected
5.15.202 through 5.15.*Not affected
6.1.165 through 6.1.*Not affected
6.6.128 through 6.6.*Not affected
6.12.75 through 6.12.*Not affected
6.18.16 through 6.18.*Not affected
6.19.6 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.