{"id":"ASB-A-482992246","details":"In hidpp_probe, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-482992246","CVE-2026-43049"],"modified":"2026-09-10T15:43:18.983809180Z","published":"2026-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-09-01"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/20130e92480a0cca90f69d9ccb1d42a06a6e07f0"},{"type":"FIX","url":"https://android.googlesource.com/kernel/common/+/0e9b1ff406b1d9f5ad2a75e2377823928a1c71ea"}],"affected":[{"package":{"name":":linux_kernel:","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2026-09-05"}]}],"versions":["Kernel"],"ecosystem_specific":{"spl":"2026-09-05","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/kernel/common/+/20130e92480a0cca90f69d9ccb1d42a06a6e07f0","target":{"file":"drivers/hid/hid-logitech-hidpp.c","function":"hidpp_probe"},"deprecated":false,"digest":{"length":3248,"function_hash":"13143492742672515492422981958165215445"},"id":"ASB-A-482992246-00d40229","signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-482992246-6c6f012b","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/20130e92480a0cca90f69d9ccb1d42a06a6e07f0","target":{"file":"drivers/hid/hid-logitech-hidpp.c"},"deprecated":false,"digest":{"line_hashes":["285466790233284448898155945896727181177","168106720500105163944754098625250711680","151771362484920014277050291903237408604","305444965237848626675540583203795705460","101919947231886068495396704808711004434","79320740314690784531177389336316165007","44382854366645048749278200273397170146"],"threshold":0.9}},{"deprecated":false,"digest":{"line_hashes":["209602177285745777398264107805513363671","4398371596744860524252510427732261622","151771362484920014277050291903237408604","305444965237848626675540583203795705460","101919947231886068495396704808711004434","79320740314690784531177389336316165007","44382854366645048749278200273397170146"],"threshold":0.9},"id":"ASB-A-482992246-8b1ab07f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/kernel/common/+/0e9b1ff406b1d9f5ad2a75e2377823928a1c71ea","target":{"file":"drivers/hid/hid-logitech-hidpp.c"}},{"source":"https://android.googlesource.com/kernel/common/+/0e9b1ff406b1d9f5ad2a75e2377823928a1c71ea","target":{"file":"drivers/hid/hid-logitech-hidpp.c","function":"hidpp_probe"},"deprecated":false,"digest":{"length":2783,"function_hash":"311877752706862605624532860474389911356"},"id":"ASB-A-482992246-f6af7e67","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/kernel/common/+/20130e92480a0cca90f69d9ccb1d42a06a6e07f0","https://android.googlesource.com/kernel/common/+/0e9b1ff406b1d9f5ad2a75e2377823928a1c71ea"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-482992246.json"}}],"schema_version":"1.9.0"}