CVE-2026-89623

In the Linux kernel, the following vulnerability has been resolved:

HID: mcp2221: stop device IO before hid hw stop

Quiesce device IO at the start of the devm cleanup callback mcp2221 hid unregister() so that incoming HID reports cannot race with hardware teardown during probe failure or device removal, addressing a potential use-after-free.

Guard the call to hid device io stop() with io started. On normal removal hid device remove() has already cleared io started before the devres group is released, so an unconditional call would otherwise hit the !io started path and emit a spurious "io already stopped" warning on every removal. The guard preserves the probe-failure balancing, where io started is still set after hid device io start(), while staying silent on the normal removal path.