{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "2562756dde550901c224e3805102bdfc17e7d13a"
            },
            {
              "fixed": "64f824dccfd316fd3db8ea1cc4e8a76ad6a02740"
            },
            {
              "fixed": "2e55d76e6e8a756f6d87c241de975599f82b02fa"
            },
            {
              "fixed": "ef8ca5bb4c8b9696f38b1bebce1c851baa02b77b"
            },
            {
              "fixed": "5a8ad63158165bacd6a1d7420e0fe5364c913b06"
            },
            {
              "fixed": "47e5e177e9e4e10da6f2759d5ce8d049e33efdc4"
            },
            {
              "fixed": "925da1d2a24787f24872de13a4680437c54de179"
            },
            {
              "fixed": "443f6b93442b10b972a16f57ceaaea75b77892b6"
            },
            {
              "fixed": "d3aba3442798ce4a4c8ce3104d7b286d61e605f9"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "4.8.0"
            },
            {
              "fixed": "5.10.271"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "5.11.0"
            },
            {
              "fixed": "5.15.222"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "5.16.0"
            },
            {
              "fixed": "6.1.189"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.2.0"
            },
            {
              "fixed": "6.6.158"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.7.0"
            },
            {
              "fixed": "6.12.112"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.13.0"
            },
            {
              "fixed": "6.18.55"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.19.0"
            },
            {
              "fixed": "7.2.9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98501.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: alps: fix use-after-free on input2 registration failure\n\nalps_input_configured() stores data-\u003einput2 before calling\ninput_register_device().  If registration fails, input_free_device()\nfrees the input device but data-\u003einput2 still points to the freed memory.\nalps_input_configured() calls hid_hw_open() before allocating input2, so\nURBs are already active and raw_event can fire during the failure window.\nA U1_SP_ABSOLUTE_REPORT_ID report arriving then causes u1_raw_event()\nto dereference the freed data-\u003einput2 -\u003e use-after-free.\n\nFix by only storing input2 into drvdata after successful registration\nand adding a NULL guard in the raw_event path.",
  "id": "CVE-2026-98501",
  "modified": "2026-10-19T02:30:41.024887971Z",
  "published": "2026-10-18T15:16:46.205Z",
  "references": [
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/2e55d76e6e8a756f6d87c241de975599f82b02fa"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/443f6b93442b10b972a16f57ceaaea75b77892b6"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/47e5e177e9e4e10da6f2759d5ce8d049e33efdc4"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/5a8ad63158165bacd6a1d7420e0fe5364c913b06"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/64f824dccfd316fd3db8ea1cc4e8a76ad6a02740"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/925da1d2a24787f24872de13a4680437c54de179"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/d3aba3442798ce4a4c8ce3104d7b286d61e605f9"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/ef8ca5bb4c8b9696f38b1bebce1c851baa02b77b"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98501.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-98501"
    }
  ],
  "schema_version": "1.9.0",
  "summary": "HID: alps: fix use-after-free on input2 registration failure"
}