https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 01:49:31 +0000 https://vulnerability.circl.lu/vuln/cve-2026-80767 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>HID: sensor: custom: Fix use-after-free in enable_sensor</p> <p>enable_sensor_store() can call set_power_report_state(), which dereferences sensor_inst-&gt;power_state and sensor_inst-&gt;report_state. These pointers refer to entries in sensor_inst-&gt;fields.</p> <p>Create the field attributes before exposing the enable_sensor sysfs attribute, so enable_sensor cannot be accessed before the state it depends on has been initialized.</p> <p>On remove, delete enable_sensor before freeing the field attributes, so a concurrent sysfs write cannot dereference freed memory through power_state or report_state.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>HID: sensor: custom: Fix use-after-free in enable_sensor</p> <p>enable_sensor_store() can call set_power_report_state(), which dereferences sensor_inst-&gt;power_state and sensor_inst-&gt;report_state. These pointers refer to entries in sensor_inst-&gt;fields.</p> <p>Create the field attributes before exposing the enable_sensor sysfs attribute, so enable_sensor cannot be accessed before the state it depends on has been initialized.</p> <p>On remove, delete enable_sensor before freeing the field attributes, so a concurrent sysfs write cannot dereference freed memory through power_state or report_state.</p> https://vulnerability.circl.lu/vuln/cve-2026-80767