CVE detail
CVE-2026-53037
In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: fix deadlock in hid_post_reset() You can build a USB device that includes a HID component and a storage or UAS component. The components can be reset only together. That means that hid_pre_reset() and hid_post_reset() are in the block IO error handling. Hence no memory allocation used in them may do block IO because the IO can deadlock on the mutex held while resetting a device and calling the interface drivers. Use GFP_NOIO for all allocations in them.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 22.0 · diversity 5.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
8 source links · newest first
No excerpt available.
Exploitgit.kernel.orgJun 24, 2026, 5:17 PMNo excerpt available.
Exploitgit.kernel.orgJun 24, 2026, 5:17 PMNo excerpt available.
Exploitgit.kernel.orgJun 24, 2026, 5:17 PMNo excerpt available.
Exploitgit.kernel.orgJun 24, 2026, 5:17 PMNo excerpt available.
Exploitgit.kernel.orgJun 24, 2026, 5:17 PMNo excerpt available.
Exploitgit.kernel.orgJun 24, 2026, 5:17 PMNo excerpt available.
Exploitgit.kernel.orgJun 24, 2026, 5:17 PMNo excerpt available.
Exploitgit.kernel.orgJun 24, 2026, 5:17 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-64238CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix deadlock on shared proxy's parent removal Commit 710abda58055 ("gpio: shared: call gpio_chi…
- CVE-2026-64171CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: fix pm_runtime leak on mutex_lock failure If tegra_i2c_mutex_lock() fails, the function returns w…
- CVE-2026-64100CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix shrinker deadlock With PROVE_LOCKING on an Snapdragon X1 and VM reclaim pressure, we see: ==…
- CVE-2026-64098CVSS 7.8 · High
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use uninterruptible resv lock for plane updates virtio_gpu_cursor_plane_update() and virtio_gpu_r…
- CVE-2026-53358CVSS 8.8 · High
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() l2cap_chan_close() removes the channel…
- CVE-2026-53326CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: debugobjects: Don't call fill_pool() in early boot hardirq context When booting a debug PREEMPT_RT kernel on…