{"id":"CVE-2026-43049","title":"HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure\n\nPresently, if the force feedback initialisation fails when probing the\nLogitech G9…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= abdd3d0b344fdf72a4904d09b97bc964d74c4419 < df966f0def87550bd81d0892cdff992202de2712","Linux >= abdd3d0b344fdf72a4904d09b97bc964d74c4419 < 772f99cc8d6e5d95613bce93c9624e154c1abe88","Linux >= abdd3d0b344fdf72a4904d09b97bc964d74c4419 < b846fb0a73e99174f08238e083e284c0463a2102","Linux >= abdd3d0b344fdf72a4904d09b97bc964d74c4419 < 9a793ac19eb84f44ed759c0fce80cf29bc2a2453","Linux >= abdd3d0b344fdf72a4904d09b97bc964d74c4419 < f7a4c78bfeb320299c1b641500fe7761eadbd101","Linux 5f7fd3576cf30d502a8b2aec4e7a49c4f894e253","Linux >= 5.3.9 < 5.4","Linux 5.4"],"published":"2026-05-01","updated":"2026-10-21","sourceUpdated":"2026-10-21T12:39:57.793Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-43049","references":[{"url":"https://git.kernel.org/stable/c/df966f0def87550bd81d0892cdff992202de2712"},{"url":"https://git.kernel.org/stable/c/772f99cc8d6e5d95613bce93c9624e154c1abe88"},{"url":"https://git.kernel.org/stable/c/b846fb0a73e99174f08238e083e284c0463a2102"},{"url":"https://git.kernel.org/stable/c/9a793ac19eb84f44ed759c0fce80cf29bc2a2453"},{"url":"https://git.kernel.org/stable/c/f7a4c78bfeb320299c1b641500fe7761eadbd101"}],"tags":["cve.org"],"epss":0.0017,"epssPercentile":0.06014,"ingestedAt":"2026-10-21T12:48:53.650Z","slug":"CVE-2026-43049","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nHID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure\n\nPresently, if the force feedback initialisation fails when probing the\nLogitech G920 Driving Force Racing Wheel for Xbox One, an error number\nwill be returned and propagated before the userspace infrastructure\n(sysfs and /dev/input) has been torn down.  If userspace ignores the\nerrors and continues to use its references to these dangling entities, a\nUAF will promptly follow.\n\nWe have 2 options; continue to return the error, but ensure that all of\nthe infrastructure is torn down accordingly or continue to treat this\ncondition as a warning by emitting the message but returning success.\nIt is thought that the original author's intention was to emit the\nwarning but keep the device functional, less the force feedback feature,\nso let's go with that.\n\n## Affected\n\n- `Linux >= abdd3d0b344fdf72a4904d09b97bc964d74c4419 < df966f0def87550bd81d0892cdff992202de2712`\n- `Linux >= abdd3d0b344fdf72a4904d09b97bc964d74c4419 < 772f99cc8d6e5d95613bce93c9624e154c1abe88`\n- `Linux >= abdd3d0b344fdf72a4904d09b97bc964d74c4419 < b846fb0a73e99174f08238e083e284c0463a2102`\n- `Linux >= abdd3d0b344fdf72a4904d09b97bc964d74c4419 < 9a793ac19eb84f44ed759c0fce80cf29bc2a2453`\n- `Linux >= abdd3d0b344fdf72a4904d09b97bc964d74c4419 < f7a4c78bfeb320299c1b641500fe7761eadbd101`\n- `Linux 5f7fd3576cf30d502a8b2aec4e7a49c4f894e253`\n- `Linux >= 5.3.9 < 5.4`\n- `Linux 5.4`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}