CVE-2026-80767

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

HID: sensor: custom: Fix use-after-free in enable_sensor

enable_sensor_store() can call set_power_report_state(), which

dereferences sensor_inst->power_state and sensor_inst->report_state.

These pointers refer to entries in sensor_inst->fields.

Create the field attributes before exposing the enable_sensor sysfs

attribute, so enable_sensor cannot be accessed before the state it

depends on has been initialized.

On remove, delete enable_sensor before freeing the field attributes,

so a concurrent sysfs write cannot dereference freed memory through

power_state or report_state.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References