CVE-2026-43251
In the Linux kernel, the following vulnerability has been resolved: HID: prodikeys: Check presence of pm->input_ep82 Fake USB devices can send their own report descriptors for which the input_mapping() hook does not get called.
Does this matter?
Lower severity and a low EPSS score (0.12%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: HID: prodikeys: Check presence of pm->input_ep82 Fake USB devices can send their own report descriptors for which the input_mapping() hook does not get called. In this case, pm->input_ep82 stays NULL, which leads to a crash later. This does not happen with the real device, but can be provoked by imposing as one.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.12% probability · 2th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-476
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS 0.1% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- https://git.kernel.org/stable/c/3f1b21cc67a15d7d081378a9b8747dd000a017b8Patch
- https://git.kernel.org/stable/c/cee8337e1bad168136aecfe6416ecd7d3aa7529aPatch
- https://git.kernel.org/stable/c/d08f35f843881ec504d7537a9bb728a073db3366Patch
- https://git.kernel.org/stable/c/d5512ce892f774d37c53082adadfcad04f21b50ePatch
- https://git.kernel.org/stable/c/e7ac1cd823cd2e9fcbd5cb0b261d6d35dbb79341Patch
- https://git.kernel.org/stable/c/edccbf7d6dc05d692bde3a89de5a4001f72a0fa4Patch
- https://git.kernel.org/stable/c/ee572578f09f0e743e9383393a75c3a7a0f9b4c2Patch
- https://git.kernel.org/stable/c/f580c79683356632f12f2c2029f2fe936d953aa1Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.