Medium 5.5Published Apr 22, 2026

CVE-2026-31524HID: asus: avoid memory leak in asus_report_fixup()

Updated under an hour ago (Oct 28, 2026, 12:10 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: HID: asus: avoid memory leak in asus_report_fixup() The asus_report_fixup() function was returning a newly allocated kmemdup()-allocated buffer, but never freeing it. Switch to devm_kzalloc() to ensure the memory is managed and freed automatically when the device is removed. The caller of report_fixup() does not take ownership of the returned pointer, but it is permitted to return a pointer whose lifetime is at least that of the input buffer. Also fix a harmless out-of-bounds read by copying only the original descriptor size.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 5703e52cc711bc01e72cf12b86a126909c79d213 before 726765b43deb2b4723869d673cc5fc6f7a3b2059; from 5703e52cc711bc01e72cf12b86a126909c79d213 before ede95cfcab8064d9a08813fbd7ed42cea8843dcf; 5703e52cc711bc01e72cf12b86a126909c79d213 builds before 2e4fe6b15c2f390c023b20d728b1a3fe7ea4f973; from 5703e52cc711bc01e72cf12b86a126909c79d213 before f20f17cffbe34fb330267e0f8084f5565f807444; 5703e52cc711bc01e72cf12b86a126909c79d213 builds before 7a6d6e4d8af044f94fa97e97af5ff2771e1fbebd; from 5703e52cc711bc01e72cf12b86a126909c79d213 before a41cc7c1668e44ff2c2d36f9a6353253ffc43e3c; from 5703e52cc711bc01e72cf12b86a126909c79d213 before 84724ac4821a160d47b84289adf139023027bdbb; 5703e52cc711bc01e72cf12b86a126909c79d213 builds before 2bad24c17742fc88973d6aea526ce1353f5334a3	CNA record
linux linux_kernel linux:linux_kernel	from 4.14 before 5.10.253; from 5.11 before 5.15.203; from 5.16 before 6.1.168; from 6.2 before 6.6.131; from 6.7 before 6.12.80; from 6.13 before 6.18.21; from 6.19 before 6.19.11; 7.0; and 1 more ranges	NVD

References

References

https://git.kernel.org/stable/c/726765b43deb2b4723869d673cc5fc6f7a3b2059	patch
https://git.kernel.org/stable/c/ede95cfcab8064d9a08813fbd7ed42cea8843dcf	patch
https://git.kernel.org/stable/c/2e4fe6b15c2f390c023b20d728b1a3fe7ea4f973	patch
https://git.kernel.org/stable/c/f20f17cffbe34fb330267e0f8084f5565f807444	patch
https://git.kernel.org/stable/c/7a6d6e4d8af044f94fa97e97af5ff2771e1fbebd	patch
https://git.kernel.org/stable/c/a41cc7c1668e44ff2c2d36f9a6353253ffc43e3c	patch
https://git.kernel.org/stable/c/84724ac4821a160d47b84289adf139023027bdbb	patch
https://git.kernel.org/stable/c/2bad24c17742fc88973d6aea526ce1353f5334a3	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.