PT-2026-44325 · Linux · Linux Kernel

CVE-2026-46202 · Published 2026-05-28 · Updated 2026-06-10

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11-1.1

Description The hid-appletb-kbd driver contains an issue where the autodim code attempts to acquire backlight device->ops lock via backlight device set brightness() and mutex lock() from atomic contexts. This occurs in two scenarios: within the appletb inactivity timer() callback, which runs in softirq context, and within reset inactivity timer(), which is called from appletb kbd hid event() and appletb kbd inp event() during softirq/IRQ contexts. Calling a sleeping function like mutex lock() from an atomic context is invalid and triggers a kernel bug.

Recommendations Update to version 7.0.11-1.1 or newer.

Exploit

Fix

Related Identifiers

CVE-2026-46202

OPENSUSE-SU-2026:10954-1

Affected Products

Linux Kernel

References · 291

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46202.json · Exploit
• https://git.kernel.org/stable/c/5c0830323689ef15224f0025276176988861b3b0 · Patch
• https://git.kernel.org/stable/c/2473a334c292af257ef68e33bc7760f4a8251812 · Patch
• https://ubuntu.com/security/CVE-2026-46202 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10954-1 · Vendor Advisory
• https://git.kernel.org/stable/c/1654e53349d4e657b331de354313461f401f5063 · Patch
• https://osv.dev/vulnerability/CVE-2026-46202 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-46202 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-46202 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-46202 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-46202 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-46202 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-46202 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-46166 · Note
• https://suse.com/security/cve/CVE-2026-45996 · Note