CVE-2026-90197

A flaw was found in the Linux kernel's Human Interface Device HID haptic subsystem. A local attacker could exploit a vulnerability in the filleffectbuf function, which incorrectly writes uninitialized or leftover memory values to the field-value array for unhandled haptic usages. This uninitializ...

SUSE CVE-2026-90197

In the Linux kernel, the following vulnerability has been resolved: HID: haptic: don't write an uninitialized value to unhandled usages filleffectbuf initializes value only for the four haptic usages handled by its switch, but writes it to field-value for every usage. An unhandled usage can...