CVE-2026-90330

Not scored yetLast modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: logitech-hidpp: Fix FF device cleanup on init failure

hidpp_ff_init() creates the input force-feedback device with input_ff_create(), then allocates the HID++ FF private data, effect ID array, and workqueue.

If any of those allocations fail after input_ff_create() succeeds, the function returns an error without destroying the FF device. Add an unwind path that frees the private allocations made by hidpp_ff_init() and calls input_ff_destroy() for failures after input_ff_create() succeeds.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= ff21a635dd1a9c6ca378847160897649cdbbfae4, < a265fee3d24bd611783fd929582b7b6d62000a65; >= ff21a635dd1a9c6ca378847160897649cdbbfae4, < 360a49fc53acdfe2dbb80c23cfa606ed7e13a85d; >= ff21a635dd1a9c6ca378847160897649cdbbfae4, < 6bb216586a3cb4ce327511a7c0445fa88e85b3cb; >= ff21a635dd1a9c6ca378847160897649cdbbfae4, < 2fd9c8112907c14efefe6a90d20b774737052db3; >= ff21a635dd1a9c6ca378847160897649cdbbfae4, < 13378c9ac0a1bcdf49ba158e4199594aafb589cd; >= ff21a635dd1a9c6ca378847160897649cdbbfae4, < dd5be4d9ce2dfc4d4a4527ef7d31d21a78e3cdac
LinuxLinux4.6

References

Timeline

Published
Sep 17, 2026
Last modified
Oct 30, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-90331In the Linux kernel, the following vulnerability has been resolved: HID: asus: refactor the two workqueues and init sequence Multiple issuCVE-2026-903328.2In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush cached MSI write before unmapping the iATU The MSICVE-2026-90333In the Linux kernel, the following vulnerability has been resolved: dm-integrity: replace forgeable discard filler with a keyed sector markCVE-2026-90334In the Linux kernel, the following vulnerability has been resolved: tty: clear cdev pointer after cdev_add() failure tty_cdev_add() drops CVE-2026-90335In the Linux kernel, the following vulnerability has been resolved: tty: skip cdev_del() when no cdev is registered TTY device registratioCVE-2026-90336In the Linux kernel, the following vulnerability has been resolved: serial: core: clear freed pointers on uart_register_driver() failure uCVE-2026-90337In the Linux kernel, the following vulnerability has been resolved: serial: core: do fallible allocations before the console can be registeCVE-2026-90338In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: keep console clock enabled for atomic writes pl011CVE-2026-90339In the Linux kernel, the following vulnerability has been resolved: powerpc/syscall: Fix syscall skip handling for seccomp and ptrace AfteCVE-2026-90347.8Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU ArchitecCVE-2026-90340In the Linux kernel, the following vulnerability has been resolved: pinctrl: generic: free maps on pinctrl_generic_to_map() failure pinctrCVE-2026-903417.7In the Linux kernel, the following vulnerability has been resolved: firmware: coreboot: Validate table bounds The existing coreboot_table_
CVE-2026-90330: Unscored | Vulnix