CVE Database›Document archive›CVE-2026-46213

CVE-2026-46213

kernel: HID: appletb-kbd: fix UAF in inactivity-timer cleanup path

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 28, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's Apple keyboard driver (appletb-kbd). A Use-After-Free (UAF) vulnerability exists in the inactivity-timer cleanup path during driver tear-down. This can occur due to race conditions between device cleanup and timer operations, or late event callbacks re-arming the timer. A local attacker could potentially exploit this to cause memory corruption, leading to system instability or a denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-364 · Signal Handler Race Condition