CVE-2026-43049

{"id": "CVE-2026-43049", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-43049", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T15:27:09.817490Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "abdd3d0b344fdf72a4904d09b97bc964d74c4419", "lessThan": "222bcf7b02899250b20a7a02d29b4e89fe537322", "versionType": "git"}, {"status": "affected", "version": "abdd3d0b344fdf72a4904d09b97bc964d74c4419", "lessThan": "df966f0def87550bd81d0892cdff992202de2712", "versionType": "git"}, {"status": "affected", "version": "abdd3d0b344fdf72a4904d09b97bc964d74c4419", "lessThan": "772f99cc8d6e5d95613bce93c9624e154c1abe88", "versionType": "git"}, {"status": "affected", "version": "abdd3d0b344fdf72a4904d09b97bc964d74c4419", "lessThan": "b846fb0a73e99174f08238e083e284c0463a2102", "versionType": "git"}, {"status": "affected", "version": "abdd3d0b344fdf72a4904d09b97bc964d74c4419", "lessThan": "9a793ac19eb84f44ed759c0fce80cf29bc2a2453", "versionType": "git"}, {"status": "affected", "version": "abdd3d0b344fdf72a4904d09b97bc964d74c4419", "lessThan": "f7a4c78bfeb320299c1b641500fe7761eadbd101", "versionType": "git"}, {"status": "affected", "version": "5f7fd3576cf30d502a8b2aec4e7a49c4f894e253", "versionType": "git"}, {"status": "affected", "version": "5.3.9", "lessThan": "5.4", "versionType": "semver"}], "programFiles": ["drivers/hid/hid-logitech-hidpp.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.4"}, {"status": "unaffected", "version": "0", "lessThan": "5.4", "versionType": "semver"}, {"status": "unaffected", "version": "6.1.191", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.160", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.81", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.22", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19.12", "versionType": "semver", "lessThanOrEqual": "6.19.*"}, {"status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/hid/hid-logitech-hidpp.c"], "defaultStatus": "affected"}]}], "published": "2026-05-01T15:16:51.297", "references": [{"url": "https://git.kernel.org/stable/c/222bcf7b02899250b20a7a02d29b4e89fe537322", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/772f99cc8d6e5d95613bce93c9624e154c1abe88", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/9a793ac19eb84f44ed759c0fce80cf29bc2a2453", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b846fb0a73e99174f08238e083e284c0463a2102", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/df966f0def87550bd81d0892cdff992202de2712", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/f7a4c78bfeb320299c1b641500fe7761eadbd101", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-416"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure\n\nPresently, if the force feedback initialisation fails when probing the\nLogitech G920 Driving Force Racing Wheel for Xbox One, an error number\nwill be returned and propagated before the userspace infrastructure\n(sysfs and /dev/input) has been torn down. If userspace ignores the\nerrors and continues to use its references to these dangling entities, a\nUAF will promptly follow.\n\nWe have 2 options; continue to return the error, but ensure that all of\nthe infrastructure is torn down accordingly or continue to treat this\ncondition as a warning by emitting the message but returning success.\nIt is thought that the original author's intention was to emit the\nwarning but keep the device functional, less the force feedback feature,\nso let's go with that."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nHID: logitech-hidpp: Prevenir uso despu\u00e9s de liberaci\u00f3n en fallos de inicializaci\u00f3n de retroalimentaci\u00f3n de fuerza\n\nActualmente, si la inicializaci\u00f3n de la retroalimentaci\u00f3n de fuerza falla al sondear el volante de carreras Logitech G920 Driving Force para Xbox One, se devolver\u00e1 y propagar\u00e1 un n\u00famero de error antes de que la infraestructura del espacio de usuario (sysfs y /dev/input) haya sido desmantelada. Si el espacio de usuario ignora los errores y contin\u00faa usando sus referencias a estas entidades colgantes, un UAF seguir\u00e1 r\u00e1pidamente.\n\nTenemos 2 opciones; continuar devolviendo el error, pero asegurar que toda la infraestructura sea desmantelada en consecuencia o continuar tratando esta condici\u00f3n como una advertencia emitiendo el mensaje pero devolviendo \u00e9xito. Se cree que la intenci\u00f3n del autor original era emitir la advertencia pero mantener el dispositivo funcional, menos la caracter\u00edstica de retroalimentaci\u00f3n de fuerza, as\u00ed que optemos por eso."}], "lastModified": "2026-11-11T23:10:00.263", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1B4E8BF3-5F39-40C7-8A91-CEF3EC9C4C61", "versionEndExcluding": "6.12.81", "versionStartIncluding": "5.4.1"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C9DF8BCE-36D3-475D-9D21-19E4F02F9029", "versionEndExcluding": "6.18.22", "versionStartIncluding": "6.13"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A2B9540-02D5-41B4-B16A-82AF66FD4F36", "versionEndExcluding": "6.19.12", "versionStartIncluding": "6.19"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.3.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BC411730-9713-49D6-B5FE-FA0D4D6713E7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.4:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D70AB13-37BE-4BD3-A652-10191F1642E4"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.4:rc6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EEDE6F28-7530-476B-A838-83E5B2D2A2DD"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.4:rc7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7BB18ED4-6619-467C-870F-7671261DBEF2"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.4:rc8:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D980DAA0-07F8-4C47-B178-0BDDDA234A06"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F253B622-8837-4245-BCE5-A7BF8FC76A16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F666C8D8-6538-46D4-B318-87610DE64C34"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "02259FDA-961B-47BC-AE7F-93D7EC6E90C2"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}