CVE-2026-64363

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists in the appleir driver. The appleir remove() function executes hid hw stop() before timer delete sync(), which can lead to the input dev being freed while a timer is still pending. Specifically, if a key is pressed shortly before device disconnection, the key up tick() function may attempt to access the freed input dev via input report key() and input sync(). Additionally, a race condition exists where a USB URB completion in appleir raw event() can re-arm the timer or directly dereference input dev through key up(), key down(), and battery flat() after the device has been disconnected. Use-After-Free is a condition where a program continues to use a pointer after it has been freed, potentially leading to crashes or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.