I think these insufficient rights re-evaluation issues are known for years. But nobody opened a CVE until....yesterday.
Are they going to read my topics to open them??? 
[CVE-2007-1984]
Peripherals from any manufacturer can experience any problem once turned on.
The solution of not producing peripherals or not turning them on is not accepted by manufacturers.
As a result, there is no manufacturer in the world that produces defect-free peripherals or software.
It is likely AI (mis-) used.
See the recent opinion by Linus Torvalds:
https://lkml.org/lkml/2026/5/17/896
( They were 2 quotes... from 2 books... 
)