In the Linux kernel, the following vulnerability has been resolved:
HID: pidff: Fix condition effect bit clearing
As reported by MPDarkGuy on discord, NULL pointer dereferences were
happening because not all the conditional effects bits were cleared.
Properly clear all conditional effect bits from ffbit
CVE-2026-23349
NONE
EPSS 0.02%
Updated Mar 25, 2026
Linux
https://git.kernel.org/stable/c/97d5c8f5c09a604c4873c8348f58de3cea69a7df
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d1edc027a4b0bb4c7a2670b530590b4df6177011
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/ef0e669dbceaf3d7bb4ae0b235fa61feabd92b0b
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVE Details
CVE ID
CVE-2026-23349
Published Date
Mar 25, 2026
Vendor
Linux
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.02%
Likelihood of exploitation in next 30 days
Percentile:
5.8th percentile (higher than 5.8% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory