CVE-2026-68359

Calling hid_hw_stop() does not stop the device IO. This results in a race condition between hid_input_report() and the point immediately following the execution of hid_device_io_start() within the driver probe function. If the probe operation fails after "io start" has been initiated, this race condition will result in a UAF vulnerability.

Fix the problem by calling hid_device_io_stop() before calling hid_hw_stop().

Database specific

{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68359.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

53e68c20aeb1e23419bed811aa3a309ceda200f9

Fixed

761249a3d92db83ae19670c4ecdf73c0a85bcb61

Fixed

185c0880397aee9def0af5a59ea65f22f37ad658

Fixed

a2a15de020597efbff84b4281dd472e5860b7e3e

Fixed

205cff797a94757ec88ba299c8e2bf2e1e3f4bbf

Fixed

18d7c523891004226bccdba39dd681eca22ceb8a

Fixed

59d104b54b0b42e30fd2a68d24ee5c49dcc54d1e

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-68359.json"

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

5.17.0

Fixed

6.1.183

Type: ECOSYSTEM
Events: Introduced

6.2.0

Fixed

6.6.148

Type: ECOSYSTEM
Events: Introduced

6.7.0

Fixed

6.12.101

Type: ECOSYSTEM
Events: Introduced

6.13.0

Fixed

6.18.42

Type: ECOSYSTEM
Events: Introduced

6.19.0

Fixed

7.1.6

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-68359.json"