Riskcovery

CVE-2026-68091

HID: wacom: stop hardware after post-start probe failures

State
Published
Severity
8.8 High
Published
Aug 10, 2026
Updated
Oct 19, 2026
Reserved
Jul 30, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: wacom: stop hardware after post-start probe failures

wacom_parse_and_register() starts HID hardware before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error paths currently release Wacom resources without stopping the HID hardware.

Route post-hid_hw_start() failures through hid_hw_stop() before releasing driver resources.

This issue was identified during our ongoing static-analysis research while reviewing kernel code.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

  • CWE-404 Improper Resource Shutdown or Release

Affected Products

ProductVersions
LinuxLinux
  • f304eb483393f135ab479d02da6f5dc7d9b51cd6 to before 5a7ca028facf04921b2c1c2e4d1ee7f282510555Affected
  • 853307924a9003b3142b5253b1caa6625fbad9fc to before 3e6473a4f0596182acdda5219b4bebfbee76514fAffected
  • e5c6c8ef3e4d3a88407404daafbf2c6be62f2185 to before 46d8b8c85ae0589fb85746a64e8908160e52aac3Affected
  • fc41101a94b11cd0d5ad8e213b2b6965f248d653 to before 1a1ebdcb56ae58a0ee2c54dd15d75121e30424e3Affected
  • c1d6708bf0d3dd976460d435373cf5abf21ce258 to before 75eb2173b63ab41c24d80cd641af18f3c117a267Affected
  • c1d6708bf0d3dd976460d435373cf5abf21ce258 to before 416095e9a6037b4b39fcadd0d2bd77a8852211ecAffected
  • c1d6708bf0d3dd976460d435373cf5abf21ce258 to before e2cc711a9df37f359159b21db56cea9c21f58a9cAffected
  • c1d6708bf0d3dd976460d435373cf5abf21ce258 to before ec2612b8ad9e642596db011dd8b6568ef1edeaa1Affected
  • d943536197c1a05e377452af4ec7942e11d018f4Affected
  • dbaca8fa9ec2c5aa55ec515686ce3b9007554eabAffected
  • 79187e8099a9feb550916dbfb962497522022b6dAffected
  • 5.10.210 to before 5.10.261Affected
  • 5.15.149 to before 5.15.212Affected
  • 6.1.79 to before 6.1.178Affected
  • 6.6.18 to before 6.6.145Affected
  • 4.19.307 to before 4.20Affected
  • 5.4.269 to before 5.5Affected
  • 6.7.6 to before 6.8Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 5.10.261 through 5.10.*Not affected
  • 5.15.212 through 5.15.*Not affected
  • 6.1.178 through 6.1.*Not affected
  • 6.6.145 through 6.6.*Not affected
  • 6.12.96 through 6.12.*Not affected
  • 6.18.39 through 6.18.*Not affected
  • 7.1.4 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.