CVE-2026-45969

HID: playstation: Add missing check for input_ff_create_memless

MEDIUM
5.5
CVSS Score
Published: May 27, 2026 at 12:18 PM UTC
Updated: June 17, 2026 at 10:52 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: HID: playstation: Add missing check for input_ff_create_memless The ps_gamepad_create() function calls input_ff_create_memless() without verifying its return value, which can lead to incorrect behavior or potential crashes when FF effects are triggered. Add a check for the return value of input_ff_create_memless().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.12 ≤ v < 5.15.2025.12 ≤ v < 6.1.1655.12 ≤ v < 6.12.755.12 ≤ v < 6.18.145.12 ≤ v < 6.19.45.12 ≤ v < 6.6.1285.12 ≤ v < 7.05.16 ≤ v < 6.1.1656.13 ≤ v < 6.18.146.19 ≤ v < 6.19.46.2 ≤ v < 6.6.1286.7 ≤ v < 6.12.755.1251151098d7ab832f2a8b8f5c51fe224a9c98fdd5
Vendor states this is fixed in 33acf9a4d6eb1f6d01691faca96ad6b2ab0fcfc0 (fixed)
Vendor states this is fixed in 35301ca2a83d17aac2f3e8e35c696f0da2a13111 (fixed)
Vendor states this is fixed in 45b01d85265bc1ccdd69e0a7887db4b905a778f4 (fixed)
Vendor states this is fixed in 496a345cc047a2c2d9d5a76956e1182525578bd5 (fixed)
Vendor states this is fixed in 987dee1486e975e2baa6a5d062cfdf18bbe901c8 (fixed)
Vendor states this is fixed in d955aeb26e1210a018492b3b32cbdfaf017aaa25 (fixed)
Vendor states this is fixed in e6807641ac94e832988655a1c0e60ccc806b76dc (fixed)
Vendor states this is fixed in 5.12 (unaffected)
Vendor states this is fixed in 5.15.202 (unaffected)
Vendor states this is fixed in 6.1.165 (unaffected)
Vendor states this is fixed in 6.12.75 (unaffected)
Vendor states this is fixed in 6.18.14 (unaffected)
Vendor states this is fixed in 6.19.4 (unaffected)
Vendor states this is fixed in 6.6.128 (unaffected)
Vendor states this is fixed in 7.0 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card