AZL-99500

Dashboard / Vulnerabilities / AZL-99500

AZL-99500

Summary: CVE-2026-80767 affecting package kernel 6.6.152.1-1

Details: In the Linux kernel, the following vulnerability has been resolved: HID: sensor: custom: Fix use-after-free in enable_sensor enable_sensor_store() can call set_power_report_state(), which dereferences sensor_inst->power_state and sensor_inst->report_state. These pointers refer to entries in sensor_inst->fields. Create the field attributes before exposing the enable_sensor sysfs attribute, so enable_sensor cannot be accessed before the state it depends on has been initialized. On remove, delete enable_sensor before freeing the field attributes, so a concurrent sysfs write cannot dereference freed memory through power_state or report_state.

References: https://nvd.nist.gov/vuln/detail/CVE-2026-80767