CVE-2026-31522

HID: magicmouse: avoid memory leak in magicmouse_report_fixup()

published April 22, 2026

CVSS
—
EPSS
0%
Percentile
5.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

HID: magicmouse: avoid memory leak in magicmouse_report_fixup()

The magicmouse_report_fixup() function was returning a

newly kmemdup()-allocated buffer, but never freeing it.

The caller of report_fixup() does not take ownership of the returned

pointer, but it *is* permitted to return a sub-portion of the input

rdesc, whose lifetime is managed by the caller.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.1th percentile
Published
2026-04-22T13:54Z
EPSS history
Timeline
  • 22 APR 13:54Z
    HID: magicmouse: avoid memory leak in magicmouse_report_fixup()
    cvelistv5