Get real-time updates on Telegram
CVE-2026-89624: Linux 6.15
CVE-2026-89624. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.0017 (percentile 0.05977), scored 17-Oct-2026.
Affected technology
Linux · f45f26a6b3e7260c129c7c6bb0ace63aeb7b3868 to before 519fa26695b02870022fcdc651efb3d379abe54e, f06bf8d94fffbb544b1cb5402c92e0a075f0d420 to before 01d9874e84d3ab78fd212ad822412eb3af84497f, f06bf8d94fffbb544b1cb5402c92e0a075f0d420 to before c457bb516b61edeab940235a011928e26925381e, f06bf8d94fffbb544b1cb5402c92e0a075f0d420 to before ce08c5555cabcd444d8b77fa69a7cb68bb05f611, c1fde337b317f0a226de92803288741c30799eb0, af9f2471dfe5a48384f5b7f021a673fbc741465e, b797352954eee6dc084cfaed0659dea60adfb484, 6.12.24 to before 6.12.111, 6.6.88 to before 6.7, 6.13.12 to before 6.14, 6.14.3 to before 6.15
Linux
Linux · 6.15
Linux
Component: Not specified by the source
File: drivers/hid/hid-universal-pidff.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.0017 · percentile 0.05977 · 2026-10-17
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-89624.html