CVE-2026-90329

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the HID subsystem. The hid device io start() function allows reports to run concurrently with the probe process. If the probe fails, the hid device probe() function releases driver resources and clears hdev->driver without excluding active report callbacks. This can lead to a situation where a report enters the hidraw report event() function while the failure path is freeing the associated hidraw object, causing a crash when the report attempts to acquire the object's list lock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.