CVE-2026-68087
Description
In the Linux kernel, the following vulnerability has been resolved: HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush() wacom_wac_queue_flush() is called via the .raw_event callback (wacom_raw_event → wacom_wac_pen_serial_enforce → wacom_wac_queue_flush). For USB HID devices, this callback is invoked from hid_irq_in(), which is a URB completion handler running in atomic context. Using GFP_KERNEL in this path can sleep, leading to a "scheduling while atomic" bug. Use GFP_ATOMIC instead. The existing code already handles allocation failure by skipping the fifo entry and continuing.
How to fix
- Linux Linuxbbe1e55629bfaabd4b2e8125b48dd3503d74ac8b, 27c4dad1b7917b747bf080792a527997e3147c69, 55f1ad573e34abf9a0443c34bc5a63d74edba7d7 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 5e013ad206895e72d7da41bc1ae89d8cb499c3aa ≤ v < bbe1e55629bfaabd4b2e8125b48dd3503d74ac8b, 5e013ad206895e72d7da41bc1ae89d8cb499c3aa ≤ v < 27c4dad1b7917b747bf080792a527997e3147c69, 5e013ad206895e72d7da41bc1ae89d8cb499c3aa ≤ v < 55f1ad573e34abf9a0443c34bc5a63d74edba7d7, 6.15 | bbe1e55629bfaabd4b2e8125b48dd3503d74ac8b, 27c4dad1b7917b747bf080792a527997e3147c69, 55f1ad573e34abf9a0443c34bc5a63d74edba7d7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.