CVE-2026-80767

In the Linux kernel, the following vulnerability has been resolved:

HID: sensor: custom: Fix use-after-free in enable sensor

enable sensor store() can call set power report state(), which dereferences sensor inst->power state and sensor inst->report state. These pointers refer to entries in sensor inst->fields.

Create the field attributes before exposing the enable sensor sysfs attribute, so enable sensor cannot be accessed before the state it depends on has been initialized.

On remove, delete enable sensor before freeing the field attributes, so a concurrent sysfs write cannot dereference freed memory through power state or report state.