In the Linux kernel, the following vulnerability has been resolved:
HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
The system can experience a random crash a few minutes after the driver is removed. This issue occurs due to improper handling of memory freeing in the ishtp_hid_remove() function.
The function currently frees the `driver_data` directly within the loop that destroys the HID devices, which can lead to accessing freed memory. Specifically, `hid_destroy_device()` uses `driver_data` when it calls `hid_ishtp_set_feature()` to power off the sensor, so freeing `driver_data` beforehand can result in accessing invalid memory.
This patch resolves the issue by storing the `driver_data` in a temporary variable before calling `hid_destroy_device()`, and then freeing the `driver_data` after the device is destroyed.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-devel-matchedUpgrade kernel-64kUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-develUpgrade kernel-64k-coreUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-rt-64k-modules-extraUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade libperfUpgrade kernel-rt-64k-debugUpgrade kernel-64k-debug-modules-extraUpgrade kernel-modulesUpgrade python3-perfUpgrade kernelUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade rvUpgrade bpftoolUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-docUpgrade kernel-64k-debug-develUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rt-64kUpgrade kernel-64k-debug-modulesUpgrade kernel-rtUpgrade kernel-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64k-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debugUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-debug-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade perfUpgrade kernel-rt-kvm | Aug 8, 2025 | Aug 4, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.235-227.919Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.179-121.185 | Apr 25, 2025 | Apr 1, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-debuginfoUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.130-139.222Upgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftoolUpgrade kernel-livepatch-6.1.131-143.221Upgrade kernel-develUpgrade kernel-modules-extra | Apr 30, 2025 | Apr 1, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Apr 1, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perf | Jun 13, 2025 | Apr 1, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jul 21, 2025 | Apr 1, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Jul 1, 2025 | Apr 1, 2025 |
| Oracle_linux | — | Upgrade kernel | Aug 12, 2025 | Apr 1, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | Apr 1, 2025 |
| Rocky_linux | — | Upgrade perfUpgrade libperf-debuginfoUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-devel-matchedUpgrade libperfUpgrade kernel-develUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-coreUpgrade rtlaUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade rvUpgrade kernel-debug-debuginfoUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debuginfo-common-s390xUpgrade python3-perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade bpftool-debuginfo | Feb 5, 2026 | Sep 8, 2025 |
| Suse | — | Upgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade dtb-sprdUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kselftests-kmp-rtUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-debugUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kselftests-kmp-defaultUpgrade dtb-amazonUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-64kb-optionalUpgrade kernel-macrosUpgrade dtb-renesasUpgrade dtb-appleUpgrade kernel-default-develUpgrade kernel-rt_debug-develUpgrade kernel-debug-develUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade kernel-default-manUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-source-rtUpgrade dlm-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-qaUpgrade cluster-md-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade dlm-kmp-64kbUpgrade dtb-rockchipUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade dtb-armUpgrade kernel-azure-optionalUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-caviumUpgrade kernel-syms-azureUpgrade dtb-allwinnerUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade kernel-azure-develUpgrade dtb-lgUpgrade kernel-devel-rtUpgrade kernel-rtUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade cluster-md-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-source-vanillaUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade dtb-xilinx | Dec 5, 2025 | Aug 6, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-gke-64k-6.8Upgrade linux-image-lowlatency-6.11Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-azure-6.8Upgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-intelUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-5.4.0-1146-aws-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.4.0-1151-azureUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-generic-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1133-kvmUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-azure-fde-6.8Upgrade linux-image-5.4.0-1120-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1036-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-5.4.0-216-lowlatencyUpgrade linux-image-5.4.0-1064-xilinx-zynqmpUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-5.4.0-1105-bluefieldUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1092-ibmUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-5.4.0-1146-awsUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-oemUpgrade linux-image-awsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azure-6.11Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-gkeop-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-216-generic-lpaeUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-6.8.0-1038-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-6.8.0-1039-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-6.8.0-84-genericUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1149-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-22.04Upgrade linux-image-bluefieldUpgrade linux-image-azure-fde-edgeUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.4.0-216-genericUpgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-5.4.0-1051-iotUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-6.8.0-1039-nvidia-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04c | May 20, 2025 | Apr 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Apr 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub