CVE-2026-89623
- Source
- https://cve.org/CVERecord?id=CVE-2026-89623
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-89623.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2026-89623
- Downstream
- Related
- Published
- 2026-09-11T19:45:20Z
- Modified
- 2026-09-25T18:26:58Z
- Summary
- HID: mcp2221: stop device IO before hid_hw_stop
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
HID: mcp2221: stop device IO before hid_hw_stop
Quiesce device IO at the start of the devm cleanup callback mcp2221_hid_unregister() so that incoming HID reports cannot race with hardware teardown during probe failure or device removal, addressing a potential use-after-free.
Guard the call to hid_device_io_stop() with io_started. On normal removal hid_device_remove() has already cleared io_started before the devres group is released, so an unconditional call would otherwise hit the !io_started path and emit a spurious "io already stopped" warning on every removal. The guard preserves the probe-failure balancing, where io_started is still set after hid_device_io_start(), while staying silent on the normal removal path.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89623.json" }- References
-
- https://git.kernel.org/stable/c/0ae90a19e6b5a8557d25d95facb7e01c9c07af38
- https://git.kernel.org/stable/c/2eda1513f573945c1e3a0090341f3d28740463b1
- https://git.kernel.org/stable/c/85d963499f1feeea287c0a37c3eac3fc1898eca9
- https://git.kernel.org/stable/c/c99ba6c234d4d537c317336376b78c088174034a
- https://git.kernel.org/stable/c/dca151633c0fde90935311c60e7cfc064aa56134
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89623.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-89623
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedd4b50ac06ea6e47bdd2b04e97d1090c673c80645Fixed85d963499f1feeea287c0a37c3eac3fc1898eca9Fixed0ae90a19e6b5a8557d25d95facb7e01c9c07af38Fixedc99ba6c234d4d537c317336376b78c088174034aFixed2eda1513f573945c1e3a0090341f3d28740463b1Fixeddca151633c0fde90935311c60e7cfc064aa56134