CVE-2026-68091: HID: wacom: stop hardware after post-start probe failures
In the Linux kernel, the following vulnerability has been resolved:
HID: wacom: stop hardware after post-start probe failures
wacomparseandregister() starts HID hardware before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error paths currently release Wacom resources without stopping the HID hardware.
Route post-hidhwstart() failures through hidhwstop() before releasing driver resources.
This issue was identified during our ongoing static-analysis research while reviewing kernel code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68091?
The severity of CVE-2026-68091 is rated as 12, indicating a critical risk level.
How do I fix CVE-2026-68091?
To fix CVE-2026-68091, ensure that your system is updated with the latest Linux kernel that addresses this vulnerability.
What systems are affected by CVE-2026-68091?
CVE-2026-68091 affects devices using the Linux kernel with HID Wacom drivers.
What are the potential impacts of CVE-2026-68091?
The potential impacts of CVE-2026-68091 include malfunctioning HID hardware and unresponsive input devices after probe failures.
Is there a workaround for CVE-2026-68091?
Currently, there is no known workaround for CVE-2026-68091, and applying the kernel update is recommended.