CVE-2026-80767

In the Linux kernel, the following vulnerability has been resolved:

HID: sensor: custom: Fix use-after-free in enable_sensor

enable_sensor_store() can call set_power_report_state(), which

dereferences sensor_inst->power_state and sensor_inst->report_state.

These pointers refer to entries in sensor_inst->fields.

Create the field attributes before exposing the enable_sensor sysfs

attribute, so enable_sensor cannot be accessed before the state it

depends on has been initialized.

On remove, delete enable_sensor before freeing the field attributes,

so a concurrent sysfs write cannot dereference freed memory through

power_state or report_state.