CVE-2026-68091

CVE-2026-68091 concerns the Linux kernel HID Wacom driver. In wacom_parse_and_register(), HID hardware is started before inputs and LED/remotes are initialized. If subsequent steps fail, the error path currently releases Wacom resources without stopping the HID hardware, potentially causing syste...

CVE-2026-68091 HID: wacom: stop hardware after post-start probe failures

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacomparseandregister starts HID hardware before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error paths currently release...

CVE-2026-68087

CVE-2026-68087 affects the Linux kernel HID wacom driver. The vulnerability stems from using GFP_KERNEL inside wacom_wac_queue_flush(), which is invoked from the atomic-context, URB-completion path (hid_irq_in()) via wacom_raw_event → wacom_wac_pen_serial_enforce → wacom_wac_queue_flush. Using GF...

EUVD-2026-55268

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: use GFPATOMIC in wacomwacqueueflush wacomwacqueueflush is called via the .rawevent callback wacomrawevent → wacomwacpenserialenforce → wacomwacqueueflush. For USB HID devices, this callback is invoked from hidirqin,...

CVE-2026-68087 HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: use GFPATOMIC in wacomwacqueueflush wacomwacqueueflush is called via the .rawevent callback wacomrawevent → wacomwacpenserialenforce → wacomwacqueueflush. For USB HID devices, this callback is invoked from hidirqin,...

CVE-2026-68087 HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: use GFPATOMIC in wacomwacqueueflush wacomwacqueueflush is called via the .rawevent callback wacomrawevent → wacomwacpenserialenforce → wacomwacqueueflush. For USB HID devices, this callback is invoked from hidirqin,...

PT-2026-69492

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the wacom parse and register function where HID hardware is started before the registration of inputs and the initialization of pad LEDs or remotes. If these subsequen...

CVE-2026-64366

A flaw was found in the Linux kernel's Wacom Human Interface Device HID driver. This vulnerability occurs in the wacomwacqueueinsert function when handling incoming reports. Improper management of the kernel's internal buffer kfifo can lead to a slab-out-of-bounds write, allowing an attacker to...

SUSE CVE-2026-64366

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix slab-out-of-bounds write in wacomwacqueueinsert wacomwacqueueinsert calls kfifoskip in a loop when the kfifo doesn't have enough space for the incoming report. If the kfifo is empty, kfifoskip reads stale data lef...

CVE-2026-64366

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix slab-out-of-bounds write in wacomwacqueueinsert wacomwacqueueinsert calls kfifoskip in a loop when the kfifo doesn't have enough space for the incoming report. If the kfifo is empty, kfifoskip reads stale data lef...

UBUNTU-CVE-2026-64366

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix slab-out-of-bounds write in wacomwacqueueinsert wacomwacqueueinsert calls kfifoskip in a loop when the kfifo doesn't have enough space for the incoming report. If the kfifo is empty, kfifoskip reads stale data lef...

CVE-2026-64366

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix slab-out-of-bounds write in wacomwacqueueinsert wacomwacqueueinsert calls kfifoskip in a loop when the kfifo doesn't have enough space for the incoming report. If the kfifo is empty, kfifoskip reads stale data lef...

EUVD-2026-48910

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix slab-out-of-bounds write in wacomwacqueueinsert wacomwacqueueinsert calls kfifoskip in a loop when the kfifo doesn't have enough space for the incoming report. If the kfifo is empty, kfifoskip reads stale data lef...

CVE-2026-64366 HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix slab-out-of-bounds write in wacomwacqueueinsert wacomwacqueueinsert calls kfifoskip in a loop when the kfifo doesn't have enough space for the incoming report. If the kfifo is empty, kfifoskip reads stale data lef...

CVE-2026-64366

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix slab-out-of-bounds write in wacomwacqueueinsert wacomwacqueueinsert calls kfifoskip in a loop when the kfifo doesn't have enough space for the incoming report. If the kfifo is empty, kfifoskip reads stale data lef...

CVE-2026-64366

CVE-2026-64366 affects the Linux kernel HID wacom driver. The vulnerability stems from wacom_wac_queue_insert() calling kfifo_skip() in a loop even when the FIFO could be empty. When empty, stale data in the kmalloc buffer can be read by __kfifo_peek_n() and treated as a record length, advancing ...

CVE-2026-64366 HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix slab-out-of-bounds write in wacomwacqueueinsert wacomwacqueueinsert calls kfifoskip in a loop when the kfifo doesn't have enough space for the incoming report. If the kfifo is empty, kfifoskip reads stale data lef...

Linux Distros Unpatched Vulnerability : CVE-2026-64366

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix slab-out-of-bounds write in wacomwacqueueinsert wacomwacqueueinsert calls...

PT-2026-64587

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-out-of-bounds write exists in the wacom wac queue insert function. The issue occurs when the function calls kfifo skip in a loop because the kfifo lacks sufficient space for an...

CVE-2026-63916

A flaw was found in the Linux kernel's Human Interface Device HID wacom driver. The wacomhidsetdevicemode function incorrectly handles the location of input mode data within a device's report. This can lead to an out-of-bounds write, where the system attempts to write data beyond the allocated...