news.mlab.sh
Vulnerabilities
Vulnerability

CVE-2026-43251

Reference data from vuln.mlab.sh, coverage from our own index.

CVSS
5.5 Medium
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0.12%
Risk score
1.3
Published
2026-05-06
Status
Published

In the Linux kernel, the following vulnerability has been resolved: HID: prodikeys: Check presence of pm->input_ep82 Fake USB devices can send their own report descriptors for which the input_mapping() hook does not get called. In this case, pm->input_ep82 stays NULL, which leads to a crash later. This does not happen with the real device, but can be provoked by imposing as one. A flaw was found in the Linux kernel's Human Interface Device (HID) prodikeys driver. A local attacker can exploit this vulnerability by connecting a specially crafted Universal Serial Bus (USB) device. This device can send a malicious report descriptor, bypassing a necessary check and causing a null pointer dereference. This issue can lead to a system crash, resulting in a Denial of Service (DoS).

Weaknesses

CWE-476

Coverage 6

Advisories and references