Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-68091

HID: wacom: stop hardware after post-start probe failures

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.261, 5.15.212, 6.1.178, 6.6.145, 4.20, and 5 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacom_parse_and_register() starts HID hardware before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error paths currently release Wacom resources without stopping the HID hardware. Route post-hid_hw_start() failures through hid_hw_stop() before releasing driver resources. This issue was identified during our ongoing static-analysis research while reviewing kernel code.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Linux Linux

    From f304eb483393f135ab479d02da6f5dc7d9b51cd6 · fixed in 5a7ca028facf04921b2c1c2e4d1ee7f282510555; From 853307924a9003b3142b5253b1caa6625fbad9fc · fixed in 3e6473a4f0596182acdda5219b4bebfbee76514f; From e5c6c8ef3e4d3a88407404daafbf2c6be62f2185 · fixed in 46d8b8c85ae0589fb85746a64e8908160e52aac3; From fc41101a94b11cd0d5ad8e213b2b6965f248d653 · fixed in 1a1ebdcb56ae58a0ee2c54dd15d75121e30424e3; From c1d6708bf0d3dd976460d435373cf5abf21ce258 · fixed in 75eb2173b63ab41c24d80cd641af18f3c117a267; From c1d6708bf0d3dd976460d435373cf5abf21ce258 · fixed in 416095e9a6037b4b39fcadd0d2bd77a8852211ec; From c1d6708bf0d3dd976460d435373cf5abf21ce258 · fixed in e2cc711a9df37f359159b21db56cea9c21f58a9c; From c1d6708bf0d3dd976460d435373cf5abf21ce258 · fixed in ec2612b8ad9e642596db011dd8b6568ef1edeaa1; From 5.10.210 · fixed in 5.10.261; From 5.15.149 · fixed in 5.15.212; From 6.1.79 · fixed in 6.1.178; From 6.6.18 · fixed in 6.6.145; From 4.19.307 · fixed in 4.20; From 5.4.269 · fixed in 5.5; From 6.7.6 · fixed in 6.8

  • Linux Linux

    6.8

  • KernelLinux

    fixed in 5.10.261; From 5.11.0 · fixed in 5.15.212; From 5.16.0 · fixed in 6.1.178; From 6.2.0 · fixed in 6.6.145; From 6.7.0 · fixed in 6.12.96; From 6.8.0 · fixed in 6.18.39; From 6.13.0 · fixed in 7.1.4

References 8

git.kernel.org