CVE-2026-64603

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the intel-hid driver where the notify handler() function is susceptible to recursion and race conditions when running on multiple CPU cores. On convertible and detachable devices, the SW TABLET MODE input device is registered lazily via intel hid switches setup(). If two events occur simultaneously on different CPUs, they may both bypass the !priv->switches check, leading to the registration of the priv->switches input device twice. This results in a duplicate sysfs entry and a subsequent NULL pointer dereference, which is a condition where the system attempts to read from a memory address that is null, typically causing a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.