[GIT PULL] HID fixes

From: Jiri Kosina

Date: Thu May 14 2026 - 17:15:03 EST


Linus,

please pull from

git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid.git tags/hid-for-linus-2026051401

to receive fixes from the HID subsystem queue, namely:

=====
- fixes for a few OOB/UAF in several HID drivers (Florian Pradines, Lee
Jones, Michael Zaidman, Rosalie Wanders, Sangyun Kim and Tomasz Pakuła)
- more general sanitiaztion of input data, dealing with potentially
malicious hardware in hid-core (Benjamin Tissoires)
- a few device-specific quirks and fixups
=====

Thanks.

----------------------------------------------------------------
Alain Michaud (1):
HID: logitech-hidpp: Add support for newer Bluetooth keyboards

Benjamin Tissoires (2):
HID: pass the buffer size to hid_report_raw_event
HID: core: introduce hid_safe_input_report()

Damien Dejean (1):
HID: elan: Add support for ELAN SB974D touchpad

Dan Carpenter (1):
HID: intel-thc-hid: Intel-quickspi: Fix some error codes

Florian Pradines (1):
HID: mcp2221: fix OOB write in mcp2221_raw_event()

Lee Jones (1):
HID: magicmouse: Prevent out-of-bounds (OOB) read during DOUBLE_REPORT_ID

Lukas Bulwahn (1):
HID: quirks: really enable the intended work around for appledisplay

Matthew Schwartz (1):
HID: hid-lenovo-go-s: restore OS_TYPE after resume from s2idle

Michael Zaidman (1):
HID: ft260: validate i2c input report length

Myeonghun Pak (1):
HID: google: hammer: stop hardware on devres action failure

Oliver Neukum (1):
HID: hid-sjoy: race between init and usage

Rosalie Wanders (4):
HID: sony: fix incorrect force-feedback check in sony_suspend()
HID: sony: remove unneeded WARN_ON() in sony_leds_init()
HID: sony: add missing size validation for SMK-Link remotes
HID: sony: add missing size validation for Rock Band 3 Pro instruments

Sangyun Kim (2):
HID: appletb-kbd: fix UAF in inactivity-timer cleanup path
HID: appletb-kbd: run inactivity autodim from workqueues

T.J. Mercier (1):
HID: playstation: Clamp num_touch_reports

Takashi Iwai (1):
HID: uclogic: Fix regression of input name assignment

Tomasz Pakuła (1):
HID: pidff: Fix integer overflow in pidff_rescale

Xu Rao (1):
HID: i2c-hid: add reset quirk for BLTP7853 touchpad

drivers/hid/bpf/hid_bpf_dispatch.c | 6 +-
drivers/hid/hid-appletb-kbd.c | 56 +++++++++++-------
drivers/hid/hid-core.c | 67 +++++++++++++++++-----
drivers/hid/hid-elan.c | 1 +
drivers/hid/hid-ft260.c | 16 +++++-
drivers/hid/hid-gfrm.c | 4 +-
drivers/hid/hid-google-hammer.c | 2 +-
drivers/hid/hid-ids.h | 4 ++
drivers/hid/hid-lenovo-go-s.c | 44 ++++++++++++++
drivers/hid/hid-logitech-hidpp.c | 40 ++++++++++++-
drivers/hid/hid-magicmouse.c | 16 ++++++
drivers/hid/hid-mcp2221.c | 7 +++
drivers/hid/hid-multitouch.c | 2 +-
drivers/hid/hid-playstation.c | 6 +-
drivers/hid/hid-primax.c | 2 +-
drivers/hid/hid-quirks.c | 2 +-
drivers/hid/hid-sjoy.c | 12 ++--
drivers/hid/hid-sony.c | 15 ++---
drivers/hid/hid-uclogic-core.c | 4 +-
drivers/hid/hid-vivaldi-common.c | 2 +-
drivers/hid/i2c-hid/i2c-hid-core.c | 9 ++-
.../intel-quickspi/quickspi-protocol.c | 4 +-
drivers/hid/usbhid/hid-core.c | 11 ++--
drivers/hid/usbhid/hid-pidff.c | 7 ++-
drivers/hid/wacom_sys.c | 6 +-
drivers/staging/greybus/hid.c | 2 +-
include/linux/hid.h | 6 +-
include/linux/hid_bpf.h | 14 +++--
28 files changed, 279 insertions(+), 88 deletions(-)

--
Jiri Kosina
SUSE Labs