CVE-2026-43152

A flaw was found in the Linux kernel's Human Interface Device (HID) subsystem, specifically within the hid-pl module. This vulnerability arises from improper error handling during device initialization. An attacker could potentially trigger a NULL pointer dereference by interacting with a device that uses Force Feedback (FF) if probe errors are not correctly managed. This could lead to system instability or a denial of service (DoS) condition.

This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux because exploitation is limited to a local denial of service and requires the presence of a specific PantherLord USB gaming device. In typical enterprise deployments, specialized gaming hardware is not utilized, substantially limiting real-world attack exposure. A successful exploit requires local access to interact with the device or the capability to attach or emulate a malicious USB peripheral, resulting in a system crash without compromising confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.