CVE-2026-90330

HID: logitech-hidpp: Fix FF device cleanup on init failure

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 30, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: logitech-hidpp: Fix FF device cleanup on init failure

hidpp_ff_init() creates the input force-feedback device with input_ff_create(), then allocates the HID++ FF private data, effect ID array, and workqueue.

If any of those allocations fail after input_ff_create() succeeds, the function returns an error without destroying the FF device. Add an unwind path that frees the private allocations made by hidpp_ff_init() and calls input_ff_destroy() for failures after input_ff_create() succeeds.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ff21a635dd1a9c6ca378847160897649cdbbfae4 to before a265fee3d24bd611783fd929582b7b6d62000a65Affected ff21a635dd1a9c6ca378847160897649cdbbfae4 to before 360a49fc53acdfe2dbb80c23cfa606ed7e13a85dAffected ff21a635dd1a9c6ca378847160897649cdbbfae4 to before 6bb216586a3cb4ce327511a7c0445fa88e85b3cbAffected ff21a635dd1a9c6ca378847160897649cdbbfae4 to before 2fd9c8112907c14efefe6a90d20b774737052db3Affected ff21a635dd1a9c6ca378847160897649cdbbfae4 to before 13378c9ac0a1bcdf49ba158e4199594aafb589cdAffected ff21a635dd1a9c6ca378847160897649cdbbfae4 to before dd5be4d9ce2dfc4d4a4527ef7d31d21a78e3cdacAffected
LinuxLinux	4.6Affected before 4.6Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.114 through 6.12.Not affected 6.18.57 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

ff21a635dd1a9c6ca378847160897649cdbbfae4 to before a265fee3d24bd611783fd929582b7b6d62000a65Affected
ff21a635dd1a9c6ca378847160897649cdbbfae4 to before 360a49fc53acdfe2dbb80c23cfa606ed7e13a85dAffected
ff21a635dd1a9c6ca378847160897649cdbbfae4 to before 6bb216586a3cb4ce327511a7c0445fa88e85b3cbAffected
ff21a635dd1a9c6ca378847160897649cdbbfae4 to before 2fd9c8112907c14efefe6a90d20b774737052db3Affected
ff21a635dd1a9c6ca378847160897649cdbbfae4 to before 13378c9ac0a1bcdf49ba158e4199594aafb589cdAffected
ff21a635dd1a9c6ca378847160897649cdbbfae4 to before dd5be4d9ce2dfc4d4a4527ef7d31d21a78e3cdacAffected

LinuxLinux

4.6Affected
before 4.6Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.114 through 6.12.*Not affected
6.18.57 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.