CVE-2026-23196
kernel: HID: Intel-thc-hid: Intel-thc: Add safety check for reading DMA buffer
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 14, 2026
Updated · June 28, 2026
Description
A NULL pointer dereference was found in the Intel THC (Touch Host Controller) HID driver. The driver reads from a DMA buffer without first checking if the buffer is ready, which can result in accessing a NULL pointer and crashing the kernel.
Statement
This affects systems with Intel THC touchscreen/touchpad controllers. The NULL pointer access occurs when the DMA buffer is accessed before initialization completes, requiring specific timing during device initialization or operation.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 · NULL Pointer Dereference