Description

In the Linux kernel, the following vulnerability has been resolved:

HID: wacom: stop hardware after post-start probe failures

wacom_parse_and_register() starts HID hardware before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error paths currently release Wacom resources without stopping the HID hardware.

Route post-hid_hw_start() failures through hid_hw_stop() before releasing driver resources.

This issue was identified during our ongoing static-analysis research while reviewing kernel code.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-404

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Linux	Linux	>= f304eb483393f135ab479d02da6f5dc7d9b51cd6, < 5a7ca028facf04921b2c1c2e4d1ee7f282510555; >= 853307924a9003b3142b5253b1caa6625fbad9fc, < 3e6473a4f0596182acdda5219b4bebfbee76514f; >= e5c6c8ef3e4d3a88407404daafbf2c6be62f2185, < 46d8b8c85ae0589fb85746a64e8908160e52aac3; >= fc41101a94b11cd0d5ad8e213b2b6965f248d653, < 1a1ebdcb56ae58a0ee2c54dd15d75121e30424e3; >= c1d6708bf0d3dd976460d435373cf5abf21ce258, < 75eb2173b63ab41c24d80cd641af18f3c117a267; >= c1d6708bf0d3dd976460d435373cf5abf21ce258, < 416095e9a6037b4b39fcadd0d2bd77a8852211ec; >= c1d6708bf0d3dd976460d435373cf5abf21ce258, < e2cc711a9df37f359159b21db56cea9c21f58a9c; >= c1d6708bf0d3dd976460d435373cf5abf21ce258, < ec2612b8ad9e642596db011dd8b6568ef1edeaa1; d943536197c1a05e377452af4ec7942e11d018f4; dbaca8fa9ec2c5aa55ec515686ce3b9007554eab; 79187e8099a9feb550916dbfb962497522022b6d; >= 5.10.210, < 5.10.261; >= 5.15.149, < 5.15.212; >= 6.1.79, < 6.1.178; >= 6.6.18, < 6.6.145; >= 4.19.307, < 4.20; >= 5.4.269, < 5.5; >= 6.7.6, < 6.8
Linux	Linux	6.8

References

Timeline

Published: Aug 10, 2026
Last modified: Oct 19, 2026
NVD status: Received

CVE-2026-68091