Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-43140

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
06/05/2026
Última modificación:
06/05/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> HID: magicmouse: Do not crash on missing msc-&gt;input<br /> <br /> Fake USB devices can send their own report descriptors for which the<br /> input_mapping() hook does not get called. In this case, msc-&gt;input stays NULL,<br /> leading to a crash at a later time.<br /> <br /> Detect this condition in the input_configured() hook and reject the device.<br /> <br /> This is not supposed to happen with actual magic mouse devices, but can be<br /> provoked by imposing as a magic mouse USB device.

Impacto