CVE-2026-53037
- Source
- https://cve.org/CVERecord?id=CVE-2026-53037
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53037.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-53037
- Downstream
- Published
- 2026-06-24T16:29:44.311Z
- Modified
- 2026-07-08T08:09:45.293063890Z
- Summary
- HID: usbhid: fix deadlock in hid_post_reset()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
HID: usbhid: fix deadlock in hidpostreset()
You can build a USB device that includes a HID component and a storage or UAS component. The components can be reset only together. That means that hidprereset() and hidpostreset() are in the block IO error handling. Hence no memory allocation used in them may do block IO because the IO can deadlock on the mutex held while resetting a device and calling the interface drivers. Use GFP_NOIO for all allocations in them.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53037.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/4e900465296ce9fb12ed47dc77389b8dde95bfe0
- https://git.kernel.org/stable/c/56d318ef8766f0deb08517fd8f3007256ea7997d
- https://git.kernel.org/stable/c/8df2c1b47ee3cd50fd454f75c7a7e2ae8a6adf72
- https://git.kernel.org/stable/c/90550af0aad5e75110073c501e4fb42fca20ff80
- https://git.kernel.org/stable/c/ad4505d2ab3aaac6498f17649608e70e80034bf2
- https://git.kernel.org/stable/c/b3d16611d7cd78e9d5c6baa19b61b7caf9f1ab5e
- https://git.kernel.org/stable/c/c7abd0e6c87441e99c759d40eb6fe589634e3041
- https://git.kernel.org/stable/c/eeceb6f4dd42065fdda3a526a93d08b8fb90fb69
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53037.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-53037
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduceddc3c78e43469063c5bf4b744214508f94c4129f9Fixed56d318ef8766f0deb08517fd8f3007256ea7997dFixed90550af0aad5e75110073c501e4fb42fca20ff80Fixedeeceb6f4dd42065fdda3a526a93d08b8fb90fb69Fixedad4505d2ab3aaac6498f17649608e70e80034bf2Fixed4e900465296ce9fb12ed47dc77389b8dde95bfe0Fixedc7abd0e6c87441e99c759d40eb6fe589634e3041Fixedb3d16611d7cd78e9d5c6baa19b61b7caf9f1ab5eFixed8df2c1b47ee3cd50fd454f75c7a7e2ae8a6adf72
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced3.5.0Fixed5.10.258
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.209
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.175
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.141
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.12.91
- Type
- ECOSYSTEM
- Events
-
Introduced6.13.0Fixed6.18.33
- Type
- ECOSYSTEM
- Events
-
Introduced6.19.0Fixed7.0.10