logitech-ipc-protocol

logitech-ipc-protocol Reverse-engineered documentation of the Logi Options+ agent IPC protocol. Enables programmatic control of Logitech multi-host devices host switching, device queries without raw HID access, on both macOS and Windows. The protocol has not been publicly documented before this...

kl-security-key

KL Security Key Experimental open-source RP2040 FIDO2/WebAuthn authenticator engineering and interoperability project by Karaaslan Labs. Status: engineering/research project. Not FIDO Alliance certified. Not a commercial high-assurance security token. Evidence boundary: the real-device observatio...

DEBIAN-CVE-2026-98502

In the Linux kernel, the following vulnerability has been resolved: HID: alps: unregister DualPoint Stick input device on remove alpsinputconfigured allocates a second input device "DualPoint Stick" with inputallocatedevice and registers it, but the alpsdriver struct has no .remove handler and...

DEBIAN-CVE-2026-98501

In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix use-after-free on input2 registration failure alpsinputconfigured stores data-input2 before calling inputregisterdevice. If registration fails, inputfreedevice frees the input device but data-input2 still points to...

CVE-2026-98860

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: cast size to ssizet when checking hidbpfhwrequest As reported by Sashiko: If a transport driver encounters a hardware error and returns a negative error code such as -EPIPE, ret is implicitly promoted to sizet when...

CVE-2026-98859

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: stop the release timer from being rearmed on remove mtremove quiesces the sticky-finger timer before stopping the hardware: timerdeletesync&td-releasetimer; sysfsremovegroup&hdev-dev.kobj, &mtattributegroup;...

CVE-2026-98645

In the Linux kernel, the following vulnerability has been resolved: HID: winwing: fix use-after-free in force feedback teardown winwinginitff passes the driver's private data, allocated with devmkzalloc in winwingprobe, as the effect context to inputffcreatememless. The memoryless force-feedback...

CVE-2026-98502

In the Linux kernel, the following vulnerability has been resolved: HID: alps: unregister DualPoint Stick input device on remove alpsinputconfigured allocates a second input device "DualPoint Stick" with inputallocatedevice and registers it, but the alpsdriver struct has no .remove handler and...

CVE-2026-98500

In the Linux kernel, the following vulnerability has been resolved: HID: hid-oxp: use canceldelayedworksync in remove oxphidremove uses canceldelayedwork for all three delayed work items. canceldelayedwork only dequeues a pending work item without waiting for a currently executing callback to...

CVE-2026-98501

In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix use-after-free on input2 registration failure alpsinputconfigured stores data-input2 before calling inputregisterdevice. If registration fails, inputfreedevice frees the input device but data-input2 still points to...

EUVD-2026-103800

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: cast size to ssizet when checking hidbpfhwrequest As reported by Sashiko: If a transport driver encounters a hardware error and returns a negative error code such as -EPIPE, ret is implicitly promoted to sizet when...

CVE-2026-98860

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: cast size to ssizet when checking hidbpfhwrequest As reported by Sashiko: If a transport driver encounters a hardware error and returns a negative error code such as -EPIPE, ret is implicitly promoted to sizet when...

EUVD-2026-103799

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: stop the release timer from being rearmed on remove mtremove quiesces the sticky-finger timer before stopping the hardware: timerdeletesync&td-releasetimer; sysfsremovegroup&hdev-dev.kobj, &mtattributegroup;...

CVE-2026-98859

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: stop the release timer from being rearmed on remove mtremove quiesces the sticky-finger timer before stopping the hardware: timerdeletesync&td-releasetimer; sysfsremovegroup&hdev-dev.kobj, &mtattributegroup;...

CVE-2026-98859 HID: multitouch: stop the release timer from being rearmed on remove

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: stop the release timer from being rearmed on remove mtremove quiesces the sticky-finger timer before stopping the hardware: timerdeletesync&td-releasetimer; sysfsremovegroup&hdev-dev.kobj, &mtattributegroup;...

CVE-2026-98859

The Linux kernel contains a vulnerability in the HID multitouch subsystem where the mt_remove() function fails to properly prevent the sticky-finger timer from being rearmed during hardware removal. While timer_delete_sync() is used to quiesce the timer, it does not prevent the transport layer fr...

CVE-2026-98645

The Linux kernel contains a use-after-free and double free vulnerability in the HID: winwing driver. The issue occurs because winwing_init_ff() passes private data allocated via devm_kzalloc() to input_ff_create_memless(), which then incorrectly frees the pointer using kfree() during teardown. Th...

EUVD-2026-103559

In the Linux kernel, the following vulnerability has been resolved: HID: winwing: fix use-after-free in force feedback teardown winwinginitff passes the driver's private data, allocated with devmkzalloc in winwingprobe, as the effect context to inputffcreatememless. The memoryless force-feedback...

CVE-2026-98645

In the Linux kernel, the following vulnerability has been resolved: HID: winwing: fix use-after-free in force feedback teardown winwinginitff passes the driver's private data, allocated with devmkzalloc in winwingprobe, as the effect context to inputffcreatememless. The memoryless force-feedback...

CVE-2026-98645 HID: winwing: fix use-after-free in force feedback teardown

In the Linux kernel, the following vulnerability has been resolved: HID: winwing: fix use-after-free in force feedback teardown winwinginitff passes the driver's private data, allocated with devmkzalloc in winwingprobe, as the effect context to inputffcreatememless. The memoryless force-feedback...