Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-45877

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients During a warm reset flow, the cl->device pointer may be NULL if the reset occurs while clients are still being enumerated. Accessing cl->device->reference_count without a NULL check leads to a kernel panic. This issue was identified during multi-unit warm reboot stress clycles. Add a defensive NULL check for cl->device to ensure stability under such intens
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:c1e87e5d2d7406c576c8b76da2ace9872adcddd7b1681f7e87acd6022c073745
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/hid/intel-ish-hid/ishtp/bus.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.9"},{"lessThan":"4.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.75","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.14","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.4","versionType":"semver…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:6a9dc00f7ac6a475a8b6654de85a8dc2efe87491687b2f2b555f9c869145d448 · sha256:bcd6ebb6600302ac… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/hid/intel-ish-hid/ishtp/bus.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"0b605e8ce60698c27a26f512968a597fd620d2e8","status":"affected","version":"3703f53b99e4a7c373ce3568dd3f91f175ebb626","versionType":"git"},{"lessThan":"feb4bcfd405282de60aba321f13a1272b30c5af4","status":"affected","version":"3703f53b99e4a7c373ce3568dd3f91f175ebb626","versionType":"git"},{"lessThan":"272dac57caa981718e7188c80c703e7bb1998054","status":"affected","version":"3703f53b…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:6a9dc00f7ac6a475a8b6654de85a8dc2efe87491687b2f2b555f9c869145d448 · sha256:bcd6ebb6600302ac… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/hid/intel-ish-hid/ishtp/bus.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.9"},{"lessThan":"4.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.75","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.14","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.4","versionType":"semver…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:6a9dc00f7ac6a475a8b6654de85a8dc2efe87491687b2f2b555f9c869145d448 · sha256:bcd6ebb6600302ac… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/hid/intel-ish-hid/ishtp/bus.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"0b605e8ce60698c27a26f512968a597fd620d2e8","status":"affected","version":"3703f53b99e4a7c373ce3568dd3f91f175ebb626","versionType":"git"},{"lessThan":"feb4bcfd405282de60aba321f13a1272b30c5af4","status":"affected","version":"3703f53b99e4a7c373ce3568dd3f91f175ebb626","versionType":"git"},{"lessThan":"272dac57caa981718e7188c80c703e7bb1998054","status":"affected","version":"3703f53b…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:6a9dc00f7ac6a475a8b6654de85a8dc2efe87491687b2f2b555f9c869145d448 · sha256:bcd6ebb6600302ac… · /containers/cna/affected/0

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/0b605e8ce60698c27a26f512968a597fd620d2e8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6a9dc00f7ac6a475a8b6654de85a8dc2efe87491687b2f2b555f9c869145d448 · sha256:bcd6ebb6600302ac… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/272dac57caa981718e7188c80c703e7bb1998054"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6a9dc00f7ac6a475a8b6654de85a8dc2efe87491687b2f2b555f9c869145d448 · sha256:bcd6ebb6600302ac… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/56f7db581ee73af53cd512e00a6261a025bf1d58"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6a9dc00f7ac6a475a8b6654de85a8dc2efe87491687b2f2b555f9c869145d448 · sha256:bcd6ebb6600302ac… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/feb4bcfd405282de60aba321f13a1272b30c5af4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6a9dc00f7ac6a475a8b6654de85a8dc2efe87491687b2f2b555f9c869145d448 · sha256:bcd6ebb6600302ac… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer