Medium 5.5Published May 6, 2026

CVE-2026-43152HID: hid-pl: handle probe errors

Updated under an hour ago (Oct 26, 2026, 5:00 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: HID: hid-pl: handle probe errors Errors in init must be reported back or we'll follow a NULL pointer the first time FF is used.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 20eb12790670985c8e30821218993bd260387b89 before 78df3de826668fe842c6061a91bc1ed68f493e80; 20eb12790670985c8e30821218993bd260387b89 builds before 8a84149337eb5e716e6d59f48ff0374dae8d8b2b; from 20eb12790670985c8e30821218993bd260387b89 before 926e6715b48b575ed7754bf163a67686bb2eb111; from 20eb12790670985c8e30821218993bd260387b89 before 449004434e1f55be85604b2645f2d07c4a92fe53; 20eb12790670985c8e30821218993bd260387b89 builds before 04e50f45b5175bb90a06f5003113cb4ed6ba44c2; 20eb12790670985c8e30821218993bd260387b89 builds before 1d46d07458dba369daf61fb643d40a62c8423d8e; 20eb12790670985c8e30821218993bd260387b89 builds before 7d2f4fdf134e7398847417b25743e1e04928c7d7; from 20eb12790670985c8e30821218993bd260387b89 before 3756a272d2cf356d2203da8474d173257f5f8521	CNA record
linux linux_kernel linux:linux_kernel	from 2.6.21 before 5.10.252; from 5.11 before 5.15.202; from 5.16 before 6.1.165; from 6.2 before 6.6.128; from 6.7 before 6.12.75; from 6.13 before 6.18.16; from 6.19 before 6.19.6	NVD

References

References

https://git.kernel.org/stable/c/78df3de826668fe842c6061a91bc1ed68f493e80	patch
https://git.kernel.org/stable/c/8a84149337eb5e716e6d59f48ff0374dae8d8b2b	patch
https://git.kernel.org/stable/c/926e6715b48b575ed7754bf163a67686bb2eb111	patch
https://git.kernel.org/stable/c/449004434e1f55be85604b2645f2d07c4a92fe53	patch
https://git.kernel.org/stable/c/04e50f45b5175bb90a06f5003113cb4ed6ba44c2	patch
https://git.kernel.org/stable/c/1d46d07458dba369daf61fb643d40a62c8423d8e	patch
https://git.kernel.org/stable/c/7d2f4fdf134e7398847417b25743e1e04928c7d7	patch
https://git.kernel.org/stable/c/3756a272d2cf356d2203da8474d173257f5f8521	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.