CVE-2026-68091

HID: wacom: stop hardware after post-start probe failures

HIGH

8.8

CVSS Score

Published: August 10, 2026 at 11:51 AM UTC

Updated: October 19, 2026 at 09:17 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.8

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacom_parse_and_register() starts HID hardware before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error paths currently release Wacom resources without stopping the HID hardware. Route post-hid_hw_start() failures through hid_hw_stop() before releasing driver resources. This issue was identified during our ongoing static-analysis research while reviewing kernel code.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

90%

4.19.307 5.10.210 5.15.149 5.4.269 6.1.79 6.6.18 6.7.6 6.879187e8099a9feb550916dbfb962497522022b6d853307924a9003b3142b5253b1caa6625fbad9fcc1d6708bf0d3dd976460d435373cf5abf21ce258d943536197c1a05e377452af4ec7942e11d018f4dbaca8fa9ec2c5aa55ec515686ce3b9007554eabe5c6c8ef3e4d3a88407404daafbf2c6be62f2185f304eb483393f135ab479d02da6f5dc7d9b51cd6fc41101a94b11cd0d5ad8e213b2b6965f248d653

Vendor states this is fixed in 1a1ebdcb56ae58a0ee2c54dd15d75121e30424e3 (fixed)

Vendor states this is fixed in 3e6473a4f0596182acdda5219b4bebfbee76514f (fixed)

Vendor states this is fixed in 416095e9a6037b4b39fcadd0d2bd77a8852211ec (fixed)

Vendor states this is fixed in 46d8b8c85ae0589fb85746a64e8908160e52aac3 (fixed)

Vendor states this is fixed in 5a7ca028facf04921b2c1c2e4d1ee7f282510555 (fixed)

Vendor states this is fixed in 75eb2173b63ab41c24d80cd641af18f3c117a267 (fixed)

Vendor states this is fixed in e2cc711a9df37f359159b21db56cea9c21f58a9c (fixed)

Vendor states this is fixed in ec2612b8ad9e642596db011dd8b6568ef1edeaa1 (fixed)

Affected range stops below 4.20, so it looks safe — our inference, not a vendor statement

Vendor states this is fixed in 5.10.261 (unaffected)

Vendor states this is fixed in 5.15.212 (unaffected)

Affected range stops below 5.5, so it looks safe — our inference, not a vendor statement