CVE-2026-90330
- Source
- https://cve.org/CVERecord?id=CVE-2026-90330
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90330.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-90330
- Downstream
- Published
- 2026-09-17T16:08:43Z
- Modified
- 2026-09-19T03:47:25Z
- Summary
- HID: logitech-hidpp: Fix FF device cleanup on init failure
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
HID: logitech-hidpp: Fix FF device cleanup on init failure
hidpp_ff_init() creates the input force-feedback device with input_ff_create(), then allocates the HID++ FF private data, effect ID array, and workqueue.
If any of those allocations fail after input_ff_create() succeeds, the function returns an error without destroying the FF device. Add an unwind path that frees the private allocations made by hidpp_ff_init() and calls input_ff_destroy() for failures after input_ff_create() succeeds.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90330.json" }- References
-
- https://git.kernel.org/stable/c/13378c9ac0a1bcdf49ba158e4199594aafb589cd
- https://git.kernel.org/stable/c/dd5be4d9ce2dfc4d4a4527ef7d31d21a78e3cdac
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90330.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-90330
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git