Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-31667

In the Linux kernel, the following vulnerability has been resolved: Input: uinput - fix circular locking dependency with ff-core A lockdep circular locking dependency warning can be triggered reproducibly when using a force-feedback gamepad with uinput (for example, playing ELDEN RING under Wine with a Flydigi Vader 5 controller): ff->mutex -> udev->mutex -> input_mutex -> dev->mutex -> ff->mutex The cycle is caused by four lock acquisition paths: 1. ff upload: input_ff_upload() holds ff-
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:c6b6146d9ef2a92a0e5e4741773ec790a324a35f8e46fcef56535538978cd4a9
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/input/misc/uinput.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.19"},{"lessThan":"2.6.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.169","versionType":"semver"}…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2edee2d3696ed5e70742355bca7ea2ec11a626d6042bfbe05d4285f158a8ab7e · sha256:a97f0a08185ce418… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/input/misc/uinput.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"71a9729f412e2c692a35c542e14b706fb342927f","status":"affected","version":"ff462551235d8d7d843a005950bc90924fcedede","versionType":"git"},{"lessThan":"271ee71a1917b89f6d73ec82dd091c33d92ee617","status":"affected","version":"ff462551235d8d7d843a005950bc90924fcedede","versionType":"git"},{"lessThan":"974f7b138c3a96dd5cd53d1b33409cd7b2229dc6","status":"affected","version":"ff462551235d8d7d84…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2edee2d3696ed5e70742355bca7ea2ec11a626d6042bfbe05d4285f158a8ab7e · sha256:a97f0a08185ce418… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/input/misc/uinput.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.19"},{"lessThan":"2.6.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.169","versionType":"semver"}…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2edee2d3696ed5e70742355bca7ea2ec11a626d6042bfbe05d4285f158a8ab7e · sha256:a97f0a08185ce418… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/input/misc/uinput.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"71a9729f412e2c692a35c542e14b706fb342927f","status":"affected","version":"ff462551235d8d7d843a005950bc90924fcedede","versionType":"git"},{"lessThan":"271ee71a1917b89f6d73ec82dd091c33d92ee617","status":"affected","version":"ff462551235d8d7d843a005950bc90924fcedede","versionType":"git"},{"lessThan":"974f7b138c3a96dd5cd53d1b33409cd7b2229dc6","status":"affected","version":"ff462551235d8d7d84…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2edee2d3696ed5e70742355bca7ea2ec11a626d6042bfbe05d4285f158a8ab7e · sha256:a97f0a08185ce418… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:2edee2d3696ed5e70742355bca7ea2ec11a626d6042bfbe05d4285f158a8ab7e · sha256:a97f0a08185ce418… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/1534661043c434b81cfde26b97a2fb2460329cf0"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2edee2d3696ed5e70742355bca7ea2ec11a626d6042bfbe05d4285f158a8ab7e · sha256:a97f0a08185ce418… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/1e09dfbb4f5d20ee111f92325a00f85778a5f328"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2edee2d3696ed5e70742355bca7ea2ec11a626d6042bfbe05d4285f158a8ab7e · sha256:a97f0a08185ce418… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/271ee71a1917b89f6d73ec82dd091c33d92ee617"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2edee2d3696ed5e70742355bca7ea2ec11a626d6042bfbe05d4285f158a8ab7e · sha256:a97f0a08185ce418… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/4cda78d6f8bf2b700529f2fbccb994c3e826d7c2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2edee2d3696ed5e70742355bca7ea2ec11a626d6042bfbe05d4285f158a8ab7e · sha256:a97f0a08185ce418… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/546c18a14924eb521fe168d916d7ce28f1e13c1d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2edee2d3696ed5e70742355bca7ea2ec11a626d6042bfbe05d4285f158a8ab7e · sha256:a97f0a08185ce418… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/71a9729f412e2c692a35c542e14b706fb342927f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2edee2d3696ed5e70742355bca7ea2ec11a626d6042bfbe05d4285f158a8ab7e · sha256:a97f0a08185ce418… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/974f7b138c3a96dd5cd53d1b33409cd7b2229dc6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2edee2d3696ed5e70742355bca7ea2ec11a626d6042bfbe05d4285f158a8ab7e · sha256:a97f0a08185ce418… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/a3d6c9c053c9c605651508569230ead633b13f76"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2edee2d3696ed5e70742355bca7ea2ec11a626d6042bfbe05d4285f158a8ab7e · sha256:a97f0a08185ce418… · /containers/cna/references/4

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer