CVE-2026-68091CWE-404

CVE-2026-68091

High · published August 10, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
17.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

HID: wacom: stop hardware after post-start probe failures

wacom_parse_and_register() starts HID hardware before registering inputs

and initializing pad LEDs/remotes. Those later steps can fail, but their

error paths currently release Wacom resources without stopping the HID

hardware.

Route post-hid_hw_start() failures through hid_hw_stop() before

releasing driver resources.

This issue was identified during our ongoing static-analysis research while

reviewing kernel code.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00262 · 17.1th percentile
Weakness
CWE-404 · Improper Resource Shutdown or Release
Published
2026-08-10T16:17Z
References (8)
EPSS history
Timeline
  • 10 AUG 11:51Z
    HID: wacom: stop hardware after post-start probe failures
    cvelistv5