SB2026082765 - Use-after-free in Linux kernel input mouse driver

Description

This security bulletin contains information about 1 vulnerability.

1) Use-after-free (CVE-ID: CVE-2026-80572)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to a use-after-free in the byd driver timer callback handling in drivers/input/mouse/byd.c when disconnecting the device while timer callbacks are running or being re-armed. A local user can trigger a race condition to execute arbitrary code.

The issue arises because the callback can dereference freed private data and its psmouse pointer during driver disconnect.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/2e509ef60ee41a2da0deb062c262bb530143fb37
• https://git.kernel.org/stable/c/8dbfd8e32a13e116790780ed0be82b5a05eb9916
• https://git.kernel.org/stable/c/c83e79c0842ed29860648bcce5022ef0ba5001c6