{
  "cveId": "CVE-2026-23349",
  "url": "https://patchblox.com/security/cve/CVE-2026-23349",
  "summary": "CVE-2026-23349 is fixed in linux on 1 platform by DEBIAN-CVE-2026-23349 (version 6.19.8-1), released March 25, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  HID: pidff: Fix condition effect bit clearing  A...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  HID: pidff: Fix condition effect bit clearing  As reported by MPDarkGuy on discord, NULL pointer dereferences were happening because not all the conditional effects bits were cleared.  Properly clear all conditional effect bits from ffbit",
  "published": "2026-03-25T11:16:33Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00125,
  "epssPercentile": 0.02252,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.19.8-1",
      "fix": "DEBIAN-CVE-2026-23349",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-23349",
      "released": "2026-03-25T11:16:33Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}