CVE-2026-53037

A flaw was found in the Linux kernel's USB Human Interface Device (HID) subsystem. This vulnerability occurs when a USB device, containing both HID and storage or Universal Attached SCSI (UAS) components, is reset. During the reset process, memory allocation operations within the hid_post_reset() function can attempt block input/output (I/O) while a mutex is held, leading to a deadlock. This can result in a Denial of Service (DoS) for the affected system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.