Strix
26.1K

CVE-2026-68091

Unknown

Last modified

CVE-2026-68091 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacom_parse_and_register() starts HID hardware before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error paths currently release Wacom resources without stopping the HID hardware. Route post-hid_hw_start() failures through hid_hw_stop() before releasing driver resources. This issue was identified during our ongoing static-analysis research while reviewing kernel code..

Description

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacom_parse_and_register() starts HID hardware before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error paths currently release Wacom resources without stopping the HID hardware. Route post-hid_hw_start() failures through hid_hw_stop() before releasing driver resources. This issue was identified during our ongoing static-analysis research while reviewing kernel code.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= f304eb483393f135ab479d02da6f5dc7d9b51cd6, < 5a7ca028facf04921b2c1c2e4d1ee7f282510555; >= 853307924a9003b3142b5253b1caa6625fbad9fc, < 3e6473a4f0596182acdda5219b4bebfbee76514f; >= e5c6c8ef3e4d3a88407404daafbf2c6be62f2185, < 46d8b8c85ae0589fb85746a64e8908160e52aac3; >= fc41101a94b11cd0d5ad8e213b2b6965f248d653, < 1a1ebdcb56ae58a0ee2c54dd15d75121e30424e3; >= c1d6708bf0d3dd976460d435373cf5abf21ce258, < 75eb2173b63ab41c24d80cd641af18f3c117a267; >= c1d6708bf0d3dd976460d435373cf5abf21ce258, < 416095e9a6037b4b39fcadd0d2bd77a8852211ec; >= c1d6708bf0d3dd976460d435373cf5abf21ce258, < e2cc711a9df37f359159b21db56cea9c21f58a9c; >= c1d6708bf0d3dd976460d435373cf5abf21ce258, < ec2612b8ad9e642596db011dd8b6568ef1edeaa1; d943536197c1a05e377452af4ec7942e11d018f4; dbaca8fa9ec2c5aa55ec515686ce3b9007554eab; 79187e8099a9feb550916dbfb962497522022b6d; >= 5.10.210, < 5.10.261; >= 5.15.149, < 5.15.212; >= 6.1.79, < 6.1.178; >= 6.6.18, < 6.6.145; >= 4.19.307, < 4.20; >= 5.4.269, < 5.5; >= 6.7.6, < 6.8
LinuxLinux6.8

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-68091?
In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacom_parse_and_register() starts HID hardware before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error paths currently release Wacom resources without stopping the HID hardware. Route post-hid_hw_start() failures through hid_hw_stop() before releasing driver resources. This issue was identified during our ongoing static-analysis research while reviewing kernel code.
How severe is CVE-2026-68091?
Severity scoring for CVE-2026-68091 is pending analysis.
How do I fix CVE-2026-68091?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-68091?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST