{"id":"ASB-A-482992246", "published":"2026-09-01T00:00:00Z", "modified":"2026-09-10T15:43:18.983809180Z", "aliases":["CVE-2026-43049", "A-482992246"], "details":"In hidpp_probe, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":":linux_kernel:", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":":0"}, {"fixed":":2026-09-05"}]}], "versions":["Kernel"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/kernel/common/+/20130e92480a0cca90f69d9ccb1d42a06a6e07f0", "https://android.googlesource.com/kernel/common/+/0e9b1ff406b1d9f5ad2a75e2377823928a1c71ea"], "severity":"High", "spl":"2026-09-05", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"13143492742672515492422981958165215445", "length":3248}, "id":"ASB-A-482992246-00d40229", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/kernel/common/+/20130e92480a0cca90f69d9ccb1d42a06a6e07f0", "target":{"file":"drivers/hid/hid-logitech-hidpp.c", "function":"hidpp_probe"}}, {"deprecated":false, "digest":{"line_hashes":["285466790233284448898155945896727181177", "168106720500105163944754098625250711680", "151771362484920014277050291903237408604", "305444965237848626675540583203795705460", "101919947231886068495396704808711004434", "79320740314690784531177389336316165007", "44382854366645048749278200273397170146"], "threshold":0.9}, "id":"ASB-A-482992246-6c6f012b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/kernel/common/+/20130e92480a0cca90f69d9ccb1d42a06a6e07f0", "target":{"file":"drivers/hid/hid-logitech-hidpp.c"}}, {"deprecated":false, "digest":{"line_hashes":["209602177285745777398264107805513363671", "4398371596744860524252510427732261622", "151771362484920014277050291903237408604", "305444965237848626675540583203795705460", "101919947231886068495396704808711004434", "79320740314690784531177389336316165007", "44382854366645048749278200273397170146"], "threshold":0.9}, "id":"ASB-A-482992246-8b1ab07f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/kernel/common/+/0e9b1ff406b1d9f5ad2a75e2377823928a1c71ea", "target":{"file":"drivers/hid/hid-logitech-hidpp.c"}}, {"deprecated":false, "digest":{"function_hash":"311877752706862605624532860474389911356", "length":2783}, "id":"ASB-A-482992246-f6af7e67", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/kernel/common/+/0e9b1ff406b1d9f5ad2a75e2377823928a1c71ea", "target":{"file":"drivers/hid/hid-logitech-hidpp.c", "function":"hidpp_probe"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-09-01"}, {"type":"FIX", "url":"https://android.googlesource.com/kernel/common/+/20130e92480a0cca90f69d9ccb1d42a06a6e07f0"}, {"type":"FIX", "url":"https://android.googlesource.com/kernel/common/+/0e9b1ff406b1d9f5ad2a75e2377823928a1c71ea"}]}