ΠΠΎΠ»ΠΈΡΠ΅ΡΡΠ²ΠΎ 22
ΠΠΎΠ»ΠΈΡΠ΅ΡΡΠ²ΠΎ 22
CVE-2026-43140
In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: Do not crash on missing msc->input Fake USB devices can send their own report descriptors for which the input_mapping() hook does not get called. In this case, msc->input stays NULL, leading to a crash at a later time. Detect this condition in the input_configured() hook and reject the device. This is not supposed to happen with actual magic mouse devices, but can be provoked by imposing as a magic mouse USB device.
CVE-2026-43140
In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: Do not crash on missing msc->input Fake USB devices can send their own report descriptors for which the input_mapping() hook does not get called. In this case, msc->input stays NULL, leading to a crash at a later time. Detect this condition in the input_configured() hook and reject the device. This is not supposed to happen with actual magic mouse devices, but can be provoked by imposing as a magic mouse USB device.
CVE-2026-43140
In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: Do not crash on missing msc->input Fake USB devices can send their own report descriptors for which the input_mapping() hook does not get called. In this case, msc->input stays NULL, leading to a crash at a later time. Detect this condition in the input_configured() hook and reject the device. This is not supposed to happen with actual magic mouse devices, but can be provoked by imposing as a magic mouse USB device.
CVE-2026-43140
In the Linux kernel, the following vulnerability has been resolved: H ...
GHSA-q3vc-67q5-pp3g
In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: Do not crash on missing msc->input Fake USB devices can send their own report descriptors for which the input_mapping() hook does not get called. In this case, msc->input stays NULL, leading to a crash at a later time. Detect this condition in the input_configured() hook and reject the device. This is not supposed to happen with actual magic mouse devices, but can be provoked by imposing as a magic mouse USB device.
BDU:2026-11680
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ ΠΊΠΎΠΌΠΏΠΎΠ½Π΅Π½ΡΠ° drivers/hid/hid-magicmouse.c ΡΠ΄ΡΠ° ΠΎΠΏΠ΅ΡΠ°ΡΠΈΠΎΠ½Π½ΠΎΠΉ ΡΠΈΡΡΠ΅ΠΌΡ Linux, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠ°Ρ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ Π²ΡΠ·Π²Π°ΡΡ ΠΎΡΠΊΠ°Π· Π² ΠΎΠ±ΡΠ»ΡΠΆΠΈΠ²Π°Π½ΠΈΠΈ
ROS-20261009-80-0205
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ kernel-lt
ROS-20261009-73-0204
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ kernel-lt
SUSE-SU-2026:2450-1
Security update for the Linux Kernel
ALT-PU-2026-7465
ALT-PU-2026-7465: package `kernel-image-rt` update to version 5.10.252-alt1.rt148
ALT-PU-2026-4750
ALT-PU-2026-4750: package `kernel-image-std-def` update to version 5.10.252-alt1
ALT-PU-2026-7309
ALT-PU-2026-7309: package `kernel-image-pine` update to version 6.18.16-alt1
ALT-PU-2026-4126
ALT-PU-2026-4126: package `kernel-image-un-def` update to version 6.1.166-alt1
SUSE-SU-2026:3166-1
Security update for the Linux Kernel
SUSE-SU-2026:3130-1
Security update for the Linux Kernel
ELSA-2026-50372
ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)
openSUSE-SU-2026:21555-1
Security update for the Linux Kernel
ALT-PU-2026-4865
ALT-PU-2026-4865: package `kernel-image-6.18` update to version 6.18.19-alt1
ALT-PU-2026-6044
ALT-PU-2026-6044: package `kernel-image-rpi-un` update to version 6.12.79-alt1
ALT-PU-2026-7006
ALT-PU-2026-7006: package `kernel-image-6.12` update to version 6.12.85-alt1
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠ΅ΠΉ Π½Π° ΡΡΡΠ°Π½ΠΈΡΡ
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ | CVSS | EPSS | ΠΠΏΡΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ | |
|---|---|---|---|---|
 | CVE-2026-43140 In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: Do not crash on missing msc->input Fake USB devices can send their own report descriptors for which the input_mapping() hook does not get called. In this case, msc->input stays NULL, leading to a crash at a later time. Detect this condition in the input_configured() hook and reject the device. This is not supposed to happen with actual magic mouse devices, but can be provoked by imposing as a magic mouse USB device. | CVSS3: 5.5 | 0% ΠΠΈΠ·ΠΊΠΈΠΉ | 6 ΠΌΠ΅ΡΡΡΠ΅Π² Π½Π°Π·Π°Π΄ |
 | CVE-2026-43140 In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: Do not crash on missing msc->input Fake USB devices can send their own report descriptors for which the input_mapping() hook does not get called. In this case, msc->input stays NULL, leading to a crash at a later time. Detect this condition in the input_configured() hook and reject the device. This is not supposed to happen with actual magic mouse devices, but can be provoked by imposing as a magic mouse USB device. | CVSS3: 5.5 | 0% ΠΠΈΠ·ΠΊΠΈΠΉ | 6 ΠΌΠ΅ΡΡΡΠ΅Π² Π½Π°Π·Π°Π΄ |
 | CVE-2026-43140 In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: Do not crash on missing msc->input Fake USB devices can send their own report descriptors for which the input_mapping() hook does not get called. In this case, msc->input stays NULL, leading to a crash at a later time. Detect this condition in the input_configured() hook and reject the device. This is not supposed to happen with actual magic mouse devices, but can be provoked by imposing as a magic mouse USB device. | CVSS3: 5.5 | 0% ΠΠΈΠ·ΠΊΠΈΠΉ | 6 ΠΌΠ΅ΡΡΡΠ΅Π² Π½Π°Π·Π°Π΄ |
| CVE-2026-43140 In the Linux kernel, the following vulnerability has been resolved: H ... | CVSS3: 5.5 | 0% ΠΠΈΠ·ΠΊΠΈΠΉ | 6 ΠΌΠ΅ΡΡΡΠ΅Π² Π½Π°Π·Π°Π΄ |
| GHSA-q3vc-67q5-pp3g In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: Do not crash on missing msc->input Fake USB devices can send their own report descriptors for which the input_mapping() hook does not get called. In this case, msc->input stays NULL, leading to a crash at a later time. Detect this condition in the input_configured() hook and reject the device. This is not supposed to happen with actual magic mouse devices, but can be provoked by imposing as a magic mouse USB device. | CVSS3: 5.5 | 0% ΠΠΈΠ·ΠΊΠΈΠΉ | 6 ΠΌΠ΅ΡΡΡΠ΅Π² Π½Π°Π·Π°Π΄ |
 | BDU:2026-11680 Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ ΠΊΠΎΠΌΠΏΠΎΠ½Π΅Π½ΡΠ° drivers/hid/hid-magicmouse.c ΡΠ΄ΡΠ° ΠΎΠΏΠ΅ΡΠ°ΡΠΈΠΎΠ½Π½ΠΎΠΉ ΡΠΈΡΡΠ΅ΠΌΡ Linux, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠ°Ρ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ Π²ΡΠ·Π²Π°ΡΡ ΠΎΡΠΊΠ°Π· Π² ΠΎΠ±ΡΠ»ΡΠΆΠΈΠ²Π°Π½ΠΈΠΈ | CVSS3: 5.5 | 0% ΠΠΈΠ·ΠΊΠΈΠΉ | 10 ΠΌΠ΅ΡΡΡΠ΅Π² Π½Π°Π·Π°Π΄ |
 | ROS-20261009-80-0205 Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ kernel-lt | CVSS3: 5.5 | 0% ΠΠΈΠ·ΠΊΠΈΠΉ | 18 Π΄Π½Π΅ΠΉ Π½Π°Π·Π°Π΄ |
| ROS-20261009-73-0204 Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ kernel-lt | CVSS3: 5.5 | 0% ΠΠΈΠ·ΠΊΠΈΠΉ | 18 Π΄Π½Π΅ΠΉ Π½Π°Π·Π°Π΄ |
 | SUSE-SU-2026:2450-1 Security update for the Linux Kernel | 4 ΠΌΠ΅ΡΡΡΠ° Π½Π°Π·Π°Π΄ | ||
| ALT-PU-2026-7465 ALT-PU-2026-7465: package `kernel-image-rt` update to version 5.10.252-alt1.rt148 | CVSS3: 8.8 | 7 ΠΌΠ΅ΡΡΡΠ΅Π² Π½Π°Π·Π°Π΄ | |
| ALT-PU-2026-4750 ALT-PU-2026-4750: package `kernel-image-std-def` update to version 5.10.252-alt1 | CVSS3: 8.8 | 8 ΠΌΠ΅ΡΡΡΠ΅Π² Π½Π°Π·Π°Π΄ | |
| ALT-PU-2026-7309 ALT-PU-2026-7309: package `kernel-image-pine` update to version 6.18.16-alt1 | CVSS3: 9.8 | 8 ΠΌΠ΅ΡΡΡΠ΅Π² Π½Π°Π·Π°Π΄ | |
| ALT-PU-2026-4126 ALT-PU-2026-4126: package `kernel-image-un-def` update to version 6.1.166-alt1 | CVSS3: 9.8 | 8 ΠΌΠ΅ΡΡΡΠ΅Π² Π½Π°Π·Π°Π΄ | |
| SUSE-SU-2026:3166-1 Security update for the Linux Kernel | 3 ΠΌΠ΅ΡΡΡΠ° Π½Π°Π·Π°Π΄ | ||
| SUSE-SU-2026:3130-1 Security update for the Linux Kernel | 3 ΠΌΠ΅ΡΡΡΠ° Π½Π°Π·Π°Π΄ | ||
| ELSA-2026-50372 ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 4 ΠΌΠ΅ΡΡΡΠ° Π½Π°Π·Π°Π΄ | ||
| openSUSE-SU-2026:21555-1 Security update for the Linux Kernel | 3 ΠΌΠ΅ΡΡΡΠ° Π½Π°Π·Π°Π΄ | ||
| ALT-PU-2026-4865 ALT-PU-2026-4865: package `kernel-image-6.18` update to version 6.18.19-alt1 | CVSS3: 9.8 | 7 ΠΌΠ΅ΡΡΡΠ΅Π² Π½Π°Π·Π°Π΄ | |
| ALT-PU-2026-6044 ALT-PU-2026-6044: package `kernel-image-rpi-un` update to version 6.12.79-alt1 | CVSS3: 9.8 | 7 ΠΌΠ΅ΡΡΡΠ΅Π² Π½Π°Π·Π°Π΄ | |
| ALT-PU-2026-7006 ALT-PU-2026-7006: package `kernel-image-6.12` update to version 6.12.85-alt1 | CVSS3: 9.8 | 6 ΠΌΠ΅ΡΡΡΠ΅Π² Π½Π°Π·Π°Π΄ |
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠ΅ΠΉ Π½Π° ΡΡΡΠ°Π½ΠΈΡΡ