PT-2026-93682

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the HID sony driver where the sony input configured function adds controllers to the sony device list before the HID core registers the input devices. If the input...

Linux Distros Unpatched Vulnerability : CVE-2026-89625

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: sony: fix UAF of ghlpoketimer / ghlurb at driver unbind For GHL Guitar Hero Live dongles, sonyprobe arms a periodic timer: ghlmagicpoke the timer callback...

CVE-2026-89625

A flaw was found in the Linux kernel's HID Human Interface Device Sony driver, affecting Guitar Hero Live GHL dongles. A race condition occurs during the driver unbinding process where a periodic timer can be re-armed after the memory it uses has been freed. This Use-After-Free UAF vulnerability...

AZL-100494 CVE-2026-89625 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: HID: sony: fix UAF of ghlpoketimer / ghlurb at driver unbind For GHL Guitar Hero Live dongles, sonyprobe arms a periodic timer: ghlmagicpoke the timer callback submits sc-ghlurb, and the URB completion ghlmagicpokecb re-arms the...

DEBIAN-CVE-2026-89625

In the Linux kernel, the following vulnerability has been resolved: HID: sony: fix UAF of ghlpoketimer / ghlurb at driver unbind For GHL Guitar Hero Live dongles, sonyprobe arms a periodic timer: ghlmagicpoke the timer callback submits sc-ghlurb, and the URB completion ghlmagicpokecb re-arms the...

UBUNTU-CVE-2026-89625

In the Linux kernel, the following vulnerability has been resolved: HID: sony: fix UAF of ghlpoketimer / ghlurb at driver unbind For GHL Guitar Hero Live dongles, sonyprobe arms a periodic timer: ghlmagicpoke the timer callback submits sc-ghlurb, and the URB completion ghlmagicpokecb re-arms the...

CVE-2026-89625

CVE-2026-89625 is a use-after-free in the Linux kernel's hid-sony driver, triggered during unbinding of Guitar Hero Live (GHL) PS4 dongles (VID 0x1430 / PID 0x07bb). The root cause is a race in sony_remove(): timer_delete_sync() does not block re-arming, and usb_free_urb() only drops a reference ...