CVE-2026-68087

CVE-2026-68087

published August 10, 2026

CVSS
—
EPSS
0%
Percentile
10.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()

wacom_wac_queue_flush() is called via the .raw_event callback

(wacom_raw_event → wacom_wac_pen_serial_enforce → wacom_wac_queue_flush).

For USB HID devices, this callback is invoked from hid_irq_in(), which

is a URB completion handler running in atomic context. Using GFP_KERNEL

in this path can sleep, leading to a "scheduling while atomic" bug.

Use GFP_ATOMIC instead. The existing code already handles allocation

failure by skipping the fifo entry and continuing.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00206 · 10.2th percentile
Published
2026-08-10T16:17Z
References (3)
EPSS history
Timeline
  • 10 AUG 11:51Z
    HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()
    cvelistv5