CVE-2026-90041

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the HID sony driver where the sony input configured() function adds controllers to the sony device list before the HID core registers the input devices. If the input register device() function fails after the callback returns successfully, the sony probe() function unwinds the process but only stops the HID hardware. This results in the sony sc being freed while its list node remains linked, causing the system to traverse freed memory when the next matching controller is processed. This is a use-after-free scenario occurring during the probe failure path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.