CVE-2026-90197

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the HID haptic subsystem where the fill effect buf() function initializes values only for four specific haptic usages. However, it writes these values to field->value[] for every usage, regardless of whether it was handled. This can result in unhandled usages receiving uninitialized values or data remaining from a previous usage, which hid output report() then serializes into the effect's report buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.