CVE-2026-68091
Received Received - Intake

HID Hardware Stop Failure in Linux Kernel

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacom_parse_and_register() starts HID hardware before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error paths currently release Wacom resources without stopping the HID hardware. Route post-hid_hw_start() failures through hid_hw_stop() before releasing driver resources. This issue was identified during our ongoing static-analysis research while reviewing kernel code.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68091
EUVD
EUVD-2026-55272

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
wacom wacom *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves the Wacom HID driver. The issue occurs when the driver starts hardware before fully registering inputs and initializing features like pad LEDs. If these later steps fail, the driver releases resources without properly stopping the hardware, potentially leaving it in an inconsistent state.

Detection Guidance

This vulnerability is specific to the Linux kernel's HID wacom driver and relates to improper handling of hardware initialization failures. Detection requires checking kernel logs for wacom driver errors or failed probe attempts during system boot or device insertion.

Impact Analysis

This vulnerability could lead to hardware malfunction or unexpected behavior in Wacom devices. It may cause system instability, crashes, or improper device operation if probe failures occur during initialization.

Mitigation Strategies

Apply the latest kernel updates from your Linux distribution to ensure the wacom driver fix is included. Monitor kernel logs for wacom-related errors after updates. If using custom kernels, verify the fix is backported.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68091. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart