92 matches found
DEBIAN-CVE-2026-98645
In the Linux kernel, the following vulnerability has been resolved: HID: winwing: fix use-after-free in force feedback teardown winwinginitff passes the driver's private data, allocated with devmkzalloc in winwingprobe, as the effect context to inputffcreatememless. The memoryless force-feedback...
CVE-2026-98645 HID: winwing: fix use-after-free in force feedback teardown
In the Linux kernel, the following vulnerability has been resolved: HID: winwing: fix use-after-free in force feedback teardown winwinginitff passes the driver's private data, allocated with devmkzalloc in winwingprobe, as the effect context to inputffcreatememless. The memoryless force-feedback...
CVE-2026-98645
The Linux kernel contains a use-after-free and double free vulnerability in the HID: winwing driver. The issue occurs because winwing_init_ff() passes private data allocated via devm_kzalloc() to input_ff_create_memless(), which then incorrectly frees the pointer using kfree() during teardown. Th...
CVE-2026-98645 HID: winwing: fix use-after-free in force feedback teardown
In the Linux kernel, the following vulnerability has been resolved: HID: winwing: fix use-after-free in force feedback teardown winwinginitff passes the driver's private data, allocated with devmkzalloc in winwingprobe, as the effect context to inputffcreatememless. The memoryless force-feedback...
CVE-2026-98645
In the Linux kernel, the following vulnerability has been resolved: HID: winwing: fix use-after-free in force feedback teardown winwinginitff passes the driver's private data, allocated with devmkzalloc in winwingprobe, as the effect context to inputffcreatememless. The memoryless force-feedback...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: Input: iforce processes the force-feedback effect index directly from the device. The iforceprocesspacket function handles a status report packet ID 0x02 by retrieving the force-feedback effect index from the device and using it ...
CVE-2026-98201
A flaw was found in the Linux kernel's input subsystem. When handling 32-bit compatibility requests for force feedback input effects, the kernel fails to properly initialize memory buffers before copying data from user space. A local user can exploit this vulnerability to read uninitialized kerne...
CVE-2026-90330
A flaw was found in the Linux kernel's logitech-hidpp driver. During the initialization of a force-feedback device, if certain memory allocations fail, the driver does not properly clean up previously allocated resources. This improper resource management could lead to a resource leak, potentiall...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: Input: uinput – fixed a circular locking dependency with ff-core A circular locking dependency warning can be triggered reproducibly when using a force-feedback gamepad with uinput for example, playing ELDEN RING under Wine with ...
SUSE CVE-2026-89624
In the Linux kernel, the following vulnerability has been resolved: HID: universal-pidff: stop the device when force-feedback init fails universalpidffprobe starts the device with hidhwstart and then, if force-feedback initialisation fails, returns the error through a label that only does "return...
Linux Distros Unpatched Vulnerability : CVE-2026-89624
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: universal-pidff: stop the device when force-feedback init fails universalpidffprobe starts the device with hidhwstart and then, if force-feedback...
CVE-2026-89624
A flaw was found in the Linux kernel's universal-pidff driver. This vulnerability occurs when the force-feedback initialization fails, leaving a hidraw character device active. A local attacker can exploit this by opening the device, leading to a use-after-free condition where the system attempts...
DEBIAN-CVE-2026-89624
In the Linux kernel, the following vulnerability has been resolved: HID: universal-pidff: stop the device when force-feedback init fails universalpidffprobe starts the device with hidhwstart and then, if force-feedback initialisation fails, returns the error through a label that only does "return...
AZL-100731 CVE-2026-89624 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: HID: universal-pidff: stop the device when force-feedback init fails universalpidffprobe starts the device with hidhwstart and then, if force-feedback initialisation fails, returns the error through a label that only does "return...
CVE-2026-89624
In the Linux kernel, the following vulnerability has been resolved: HID: universal-pidff: stop the device when force-feedback init fails universalpidffprobe starts the device with hidhwstart and then, if force-feedback initialisation fails, returns the error through a label that only does "return...
UBUNTU-CVE-2026-89624
In the Linux kernel, the following vulnerability has been resolved: HID: universal-pidff: stop the device when force-feedback init fails universalpidffprobe starts the device with hidhwstart and then, if force-feedback initialisation fails, returns the error through a label that only does "return...
CVE-2026-89624
In the Linux kernel, the following vulnerability has been resolved: HID: universal-pidff: stop the device when force-feedback init fails universalpidffprobe starts the device with hidhwstart and then, if force-feedback initialisation fails, returns the error through a label that only does "return...
CVE-2026-89624 HID: universal-pidff: stop the device when force-feedback init fails
In the Linux kernel, the following vulnerability has been resolved: HID: universal-pidff: stop the device when force-feedback init fails universalpidffprobe starts the device with hidhwstart and then, if force-feedback initialisation fails, returns the error through a label that only does "return...
EUVD-2026-76536
In the Linux kernel, the following vulnerability has been resolved: HID: universal-pidff: stop the device when force-feedback init fails universalpidffprobe starts the device with hidhwstart and then, if force-feedback initialisation fails, returns the error through a label that only does "return...
CVE-2026-89624
In the Linux kernel, the following vulnerability has been resolved: HID: universal-pidff: stop the device when force-feedback init fails universalpidffprobe starts the device with hidhwstart and then, if force-feedback initialisation fails, returns the error through a label that only does "return...