CVE-2026-68091

High

Description

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacom_parse_and_register() starts HID hardware before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error paths currently release Wacom resources without stopping the HID hardware. Route post-hid_hw_start() failures through hid_hw_stop() before releasing driver resources. This issue was identified during our ongoing static-analysis research while reviewing kernel code.

SeverityHigh
CVSS8.8
Exploit probability—
ProductLinux
PublishedAug 10, 2026
First seenAug 10, 2026
Weakness typeCWE-404CWE-404

How to fix

Update
  • Linux Linux5a7ca028facf04921b2c1c2e4d1ee7f282510555, 3e6473a4f0596182acdda5219b4bebfbee76514f, 46d8b8c85ae0589fb85746a64e8908160e52aac3, 1a1ebdcb56ae58a0ee2c54dd15d75121e30424e3, 75eb2173b63ab41c24d80cd641af18f3c117a267, 416095e9a6037b4b39fcadd0d2bd77a8852211ec, e2cc711a9df37f359159b21db56cea9c21f58a9c, ec2612b8ad9e642596db011dd8b6568ef1edeaa1, 5.10.261, 5.15.212, 6.1.178, 6.6.145, 4.20, 5.5, 6.8 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxf304eb483393f135ab479d02da6f5dc7d9b51cd6 ≤ v < 5a7ca028facf04921b2c1c2e4d1ee7f282510555, 853307924a9003b3142b5253b1caa6625fbad9fc ≤ v < 3e6473a4f0596182acdda5219b4bebfbee76514f, e5c6c8ef3e4d3a88407404daafbf2c6be62f2185 ≤ v < 46d8b8c85ae0589fb85746a64e8908160e52aac3, fc41101a94b11cd0d5ad8e213b2b6965f248d653 ≤ v < 1a1ebdcb56ae58a0ee2c54dd15d75121e30424e3, c1d6708bf0d3dd976460d435373cf5abf21ce258 ≤ v < 75eb2173b63ab41c24d80cd641af18f3c117a267, c1d6708bf0d3dd976460d435373cf5abf21ce258 ≤ v < 416095e9a6037b4b39fcadd0d2bd77a8852211ec, c1d6708bf0d3dd976460d435373cf5abf21ce258 ≤ v < e2cc711a9df37f359159b21db56cea9c21f58a9c, c1d6708bf0d3dd976460d435373cf5abf21ce258 ≤ v < ec2612b8ad9e642596db011dd8b6568ef1edeaa1, d943536197c1a05e377452af4ec7942e11d018f4, dbaca8fa9ec2c5aa55ec515686ce3b9007554eab, 79187e8099a9feb550916dbfb962497522022b6d, 5.10.210 ≤ v < 5.10.261, 5.15.149 ≤ v < 5.15.212, 6.1.79 ≤ v < 6.1.178, 6.6.18 ≤ v < 6.6.145, 4.19.307 ≤ v < 4.20, 5.4.269 ≤ v < 5.5, 6.7.6 ≤ v < 6.8, 6.85a7ca028facf04921b2c1c2e4d1ee7f282510555, 3e6473a4f0596182acdda5219b4bebfbee76514f, 46d8b8c85ae0589fb85746a64e8908160e52aac3, 1a1ebdcb56ae58a0ee2c54dd15d75121e30424e3, 75eb2173b63ab41c24d80cd641af18f3c117a267, 416095e9a6037b4b39fcadd0d2bd77a8852211ec, e2cc711a9df37f359159b21db56cea9c21f58a9c, ec2612b8ad9e642596db011dd8b6568ef1edeaa1, 5.10.261, 5.15.212, 6.1.178, 6.6.145, 4.20, 5.5, 6.8

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.