AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-68091

HIGH · CVSS 8.8 EPSS 0.27%

Source: NVD + CISA KEV + EPSS · Published 2026-08-10 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

The vulnerability affects the Wacom driver in the Linux kernel, where the hardware is initiated before input registration and LED initialization, potentially leading to resource leaks if initialization fails. This flaw can result in improper hardware management, which may impact system stability and performance. Linux administrators and developers using Wacom devices should prioritize addressing this issue to ensure reliable hardware operation and prevent resource mismanagement.

CVE
CVE-2026-68091
Severity
HIGH
CVSS
8.8
EPSS
0.27%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacom_parse_and_register() starts HID hardware before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error paths currently release Wacom resources without stopping the HID hardware. Route post-hid_hw_start() failures through hid_hw_stop() before releasing driver resources. This issue was identified during our ongoing static-analysis research while reviewing kernel code.