CVE-2026-98502: HID: alps: unregister DualPoint Stick input device on remove
In the Linux kernel, the following vulnerability has been resolved:
HID: alps: unregister DualPoint Stick input device on remove
alpsinputconfigured() allocates a second input device ("DualPoint Stick") with inputallocatedevice() and registers it, but the alpsdriver struct has no .remove handler and input2 is not tracked in hdev->inputs. The default remove path (hidhwstop -> hidinputdisconnect) only iterates hdev->inputs, so input2 is never unregistered and leaks on every device removal.
Add a .remove handler that stops the device first (preventing URB callbacks from touching input2 during teardown) and then unregisters input2.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Add an ALPS .remove handler that stops the device first to prevent URB callbacks during teardown, then unregisters the DualPoint Stick input2 device on every device removal.
Linux kernel HID ALPS driver .remove handler = implemented