CVE-2026-93826

A flaw was found in the Linux kernel's Logitech HID++ driver. When input device registration fails during a device connection event, the driver releases the device memory but retains a stale pointer to it. An attacker could exploit this flaw to cause a use-after-free vulnerability, where the kernel accesses memory that has already been deallocated. This issue primarily leads to a denial of service (DoS) via a system crash and could potentially allow arbitrary code execution.

A moderate-impact use-after-free flaw was found in the Linux kernel's Logitech HID++ driver. When input device registration fails during a device connection event, hidpp_connect_event() frees the input device structure with input_free_device() but keeps a stale pointer to the freed memory in hidpp->input. A subsequent access through that stale pointer can crash the kernel, resulting in a denial of service; while a use-after-free could in theory have broader consequences, no such exploitation has been demonstrated. Triggering the flaw requires a Logitech HID++ device connection event in which input_register_device() fails (for example under memory pressure), followed by a later use of the stale pointer, so reliable practical exploitation is unlikely. For this reason Red Hat rates the impact as MODERATE, lower than the upstream CVE record's IMPORTANT severity (CVSS 7.5). The vulnerable code is present in the kernel packages of Red Hat Enterprise Linux 8, 9, and 10, Red Hat In-Vehicle OS, and the RHEL CoreOS 8 and 9 kernels shipped with OpenShift Container Platform 4; the Red Hat Enterprise Linux 6 and 7 Extended Life Cycle Support kernels do not contain the vulnerable code and are not affected. Fixes for the affected products are currently deferred because this is a hard-to-trigger error-path issue whose primary impact is a local denial of service via a malicious or emulated HID device, and it does not currently meet the criteria for an out-of-cycle update. The residual risk of the deferral is limited to a potential kernel crash on systems where an attacker can attach or emulate a Logitech HID++ device and induce an input device registration failure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.