CVE-2026-98500

The Linux kernel contains a vulnerability in the hid-oxp driver. The oxp_hid_remove() function incorrectly uses cancel_delayed_work() for three delayed work items. Because this function only dequeues pending items without waiting for active callbacks to finish, any running callbacks—specifically ...

CVE-2026-98500 HID: hid-oxp: use cancel_delayed_work_sync() in remove

In the Linux kernel, the following vulnerability has been resolved: HID: hid-oxp: use canceldelayedworksync in remove oxphidremove uses canceldelayedwork for all three delayed work items. canceldelayedwork only dequeues a pending work item without waiting for a currently executing callback to...