CVE-2026-64362
Vulnérabilité non évaluée dans Linux (Linux)
Description
In the Linux kernel, the following vulnerability has been resolved: HID: lg-g15: cancel pending work on remove to fix a use-after-free lg_g15_data is allocated with devm and holds a work item. The report handlers schedule that work straight from device input. lg_g15_event() and lg_g15_v2_event() do it on the backlight cycle key, and lg_g510_leds_event() does it too. The worker dereferences the lg_g15_data back through container_of. The driver had no remove callback and never cancelled the work. So if a report scheduled the work and the keyboard was then unplugged, devres freed lg_g15_data while the work was still pending or running, and the worker touched freed memory. This is a use-after-free. It is reachable as a race on device unplug. Add a remove callback that cancels the work before devres frees the state. g15->work is only initialized for the models that schedule it (G15, G15 v2, G510). The G13 and Z-10 leave it zeroed, so guard the cancel on g15->work.func to avoid cancelling a work that was never set up. The g15 NULL test mirrors the one already in lg_g15_raw_event().
Gravité et risque d'exploitation
CVE-2026-64362 obtient un score CVSS de 0.0/10, soit une gravité non évaluée. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 0.13 %, ce qui la place devant 2.0 % des CVE référencées.
Que faire ?
- Vérifiez si Linux (versions <=6.1.*, <=6.12.*, 97b741aba918c4143f4208d2421d08ff215c1b49, 6.18.39, <3b9a3919aac6977262f04d5365c0456877522a44, 0, <7705b4140d188ce22656f6e541ae7ef834c7e11a, <=7.1.*, 7.1.4, <acce9dee807f21184fff19ad17c8ed464247e7f7, 6.1.178, <=5.10.*, <=6.6.*, <4aef9676c26dff8723b56834951cfc6b618f0986, <5.5, <=6.18.*, 5.15.212, 6.6.145, 5.10.261, 5.5, <=*, <dfc6e61f83113cc18346b6988f07271c0063357d, <=5.15.*, <4d0d51bc12d246accbfbb94de05d729c68c9b8fb, <8131f4226688c4be5f30874d167e44dab838eb09, 6.12.96, 7.2, <33cd1a000daf929356aacf2b191d31714ff0615e) est présent sur votre parc.
- Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
- À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
- Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.
Références
- https://git.kernel.org/stable/c/3b9a3919aac6977262f04d5365c0456877522a44
- https://git.kernel.org/stable/c/4aef9676c26dff8723b56834951cfc6b618f0986
- https://git.kernel.org/stable/c/acce9dee807f21184fff19ad17c8ed464247e7f7
- https://git.kernel.org/stable/c/33cd1a000daf929356aacf2b191d31714ff0615e
- https://git.kernel.org/stable/c/dfc6e61f83113cc18346b6988f07271c0063357d
- https://git.kernel.org/stable/c/4d0d51bc12d246accbfbb94de05d729c68c9b8fb
- https://git.kernel.org/stable/c/8131f4226688c4be5f30874d167e44dab838eb09
- https://git.kernel.org/stable/c/7705b4140d188ce22656f6e541ae7ef834c7e11a