CVE-2026-46213
kernel: HID: appletb-kbd: fix UAF in inactivity-timer cleanup path
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 28, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's Apple keyboard driver (appletb-kbd). A Use-After-Free (UAF) vulnerability exists in the inactivity-timer cleanup path during driver tear-down. This can occur due to race conditions between device cleanup and timer operations, or late event callbacks re-arming the timer. A local attacker could potentially exploit this to cause memory corruption, leading to system instability or a denial of service.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-364 · Signal Handler Race Condition