Memory Leak Issue in Apple HID Driver for Linux Kernel

CVE-2026-31520

What is CVE-2026-31520?

A memory leak vulnerability exists in the Apple HID driver within the Linux Kernel, specifically in the apple_report_fixup() function. This function allocates a new buffer using kmemdup() but fails to free it appropriately, leading to potential memory management issues. The returned pointer does not require ownership by the caller, although it can deliver a sub-portion of the input rdesc, managed by the caller's context. This oversight can cause unintended resource consumption and system instability.

References