CVE-2026-80773HID: huawei: fix missing hid_is_usb() check
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: HID: huawei: fix missing hid_is_usb() check to_usb_interface() can only be used on a hid_device whose parent is really USB; uhid can create devices that identify as being on BUS_USB, but don't actually have a USB parent. Fix the use of to_usb_interface() without a hid_is_usb() check. I have verified that it is currently possible to trigger a kernel splat due to this bug in an ASAN build, and that this commit fixes the issue.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from e93faaca84b73431ccef029b2c8e902e5be83006 before 66805454c01ffefc40d08a962d606cdb73644c5d; from e93faaca84b73431ccef029b2c8e902e5be83006 before 9acc2463991cdb0856fdbd63fd7178102c1ed73d; from e93faaca84b73431ccef029b2c8e902e5be83006 before 4cdb6b4b34d7823254f6e1b22faf56c96ac57fb9 | CNA record |
References
- https://git.kernel.org/stable/c/66805454c01ffefc40d08a962d606cdb73644c5d
- https://git.kernel.org/stable/c/9acc2463991cdb0856fdbd63fd7178102c1ed73d
- https://git.kernel.org/stable/c/4cdb6b4b34d7823254f6e1b22faf56c96ac57fb9
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.