---
id: CVE-2026-31522
title: 'HID: magicmouse: avoid memory leak in magicmouse_report_fixup()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  HID: magicmouse: avoid memory leak in magicmouse_report_fixup()

  The magicmouse_report_fixup() function was returning a
  newly kmemdup()-allocated buffer, but never free…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= e6ad399596bd234be4722022146e33e15c7e424d <
    579c4c9857acdc8380fa99803f355f878bd766cb
  - >-
    Linux >= 0b91b4e4dae63cd43871fc2012370b86ee588f91 <
    d84c21aabaab517b9aaf9bc1d785922cb9db2f31
  - >-
    Linux >= 0b91b4e4dae63cd43871fc2012370b86ee588f91 <
    7edfe4346b052b708645d0acc0f186425766b785
  - >-
    Linux >= 0b91b4e4dae63cd43871fc2012370b86ee588f91 <
    79e5dcc95d9abed6f8203cfd529f4ec71f0e505d
  - >-
    Linux >= 0b91b4e4dae63cd43871fc2012370b86ee588f91 <
    136f605e246b4bfe7ac2259471d1ff814aed0084
  - >-
    Linux >= 0b91b4e4dae63cd43871fc2012370b86ee588f91 <
    fa95b0146358b49f9858139b67314591fd5871b0
  - >-
    Linux >= 0b91b4e4dae63cd43871fc2012370b86ee588f91 <
    91e8c6e601bdc1ccdf886479b6513c01c7e51c2c
  - Linux c394bd1bc8537e61593b6b6799e01495c7cf9008
  - Linux >= 5.15.17 < 5.15.203
  - Linux >= 5.16.3 < 5.17
  - Linux 5.17
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:37:15.850629Z'
published: '2026-04-22'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:45:05.687Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-31522'
references:
  - url: 'https://git.kernel.org/stable/c/579c4c9857acdc8380fa99803f355f878bd766cb'
  - url: 'https://git.kernel.org/stable/c/d84c21aabaab517b9aaf9bc1d785922cb9db2f31'
  - url: 'https://git.kernel.org/stable/c/7edfe4346b052b708645d0acc0f186425766b785'
  - url: 'https://git.kernel.org/stable/c/79e5dcc95d9abed6f8203cfd529f4ec71f0e505d'
  - url: 'https://git.kernel.org/stable/c/136f605e246b4bfe7ac2259471d1ff814aed0084'
  - url: 'https://git.kernel.org/stable/c/fa95b0146358b49f9858139b67314591fd5871b0'
  - url: 'https://git.kernel.org/stable/c/91e8c6e601bdc1ccdf886479b6513c01c7e51c2c'
tags:
  - cve.org
epss: 0.00123
epssPercentile: 0.0206
ingestedAt: '2026-11-05T23:41:31.977Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

HID: magicmouse: avoid memory leak in magicmouse_report_fixup()

The magicmouse_report_fixup() function was returning a
newly kmemdup()-allocated buffer, but never freeing it.

The caller of report_fixup() does not take ownership of the returned
pointer, but it *is* permitted to return a sub-portion of the input
rdesc, whose lifetime is managed by the caller.

## Affected

- `Linux >= e6ad399596bd234be4722022146e33e15c7e424d < 579c4c9857acdc8380fa99803f355f878bd766cb`
- `Linux >= 0b91b4e4dae63cd43871fc2012370b86ee588f91 < d84c21aabaab517b9aaf9bc1d785922cb9db2f31`
- `Linux >= 0b91b4e4dae63cd43871fc2012370b86ee588f91 < 7edfe4346b052b708645d0acc0f186425766b785`
- `Linux >= 0b91b4e4dae63cd43871fc2012370b86ee588f91 < 79e5dcc95d9abed6f8203cfd529f4ec71f0e505d`
- `Linux >= 0b91b4e4dae63cd43871fc2012370b86ee588f91 < 136f605e246b4bfe7ac2259471d1ff814aed0084`
- `Linux >= 0b91b4e4dae63cd43871fc2012370b86ee588f91 < fa95b0146358b49f9858139b67314591fd5871b0`
- `Linux >= 0b91b4e4dae63cd43871fc2012370b86ee588f91 < 91e8c6e601bdc1ccdf886479b6513c01c7e51c2c`
- `Linux c394bd1bc8537e61593b6b6799e01495c7cf9008`
- `Linux >= 5.15.17 < 5.15.203`
- `Linux >= 5.16.3 < 5.17`
- `Linux 5.17`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.