CVE-2026-64603

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> platform/x86: intel-hid: Protect ACPI notify handler against recursion<br /> <br /> Since commit e2ffcda16290 ("ACPI: OSL: Allow Notify () handlers to run on<br /> all CPUs") ACPI notify handlers like the intel-hid notify_handler() may<br /> run on multiple CPU cores racing with themselves.<br /> <br /> On convertibles and detachables (matched by DMI chassis-type 31 and 32 in<br /> dmi_auto_add_switch[]) the SW_TABLET_MODE input device is registered<br /> lazily from notify_handler() on the first tablet-mode event, via<br /> intel_hid_switches_setup(). When two such events race on different CPUs<br /> both can pass the !priv-&gt;switches check and register the priv-&gt;switches<br /> input device twice, resulting in a duplicate sysfs entry and a subsequent<br /> NULL pointer dereference.<br /> <br /> This is the same class of bug fixed by commit e075c3b13a0a ("platform/x86:<br /> intel-vbtn: Protect ACPI notify handler against recursion") for the<br /> sibling intel-vbtn driver.<br /> <br /> Protect intel-hid notify_handler() from racing with itself with a mutex<br /> to fix this.