CVE-2026-90330

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-90330
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90330.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-90330
Downstream
Related
Published
2026-09-17T16:08:43Z
Modified
2026-10-31T02:47:59Z
Summary
HID: logitech-hidpp: Fix FF device cleanup on init failure
Details

In the Linux kernel, the following vulnerability has been resolved:

HID: logitech-hidpp: Fix FF device cleanup on init failure

hidpp_ff_init() creates the input force-feedback device with input_ff_create(), then allocates the HID++ FF private data, effect ID array, and workqueue.

If any of those allocations fail after input_ff_create() succeeds, the function returns an error without destroying the FF device. Add an unwind path that frees the private allocations made by hidpp_ff_init() and calls input_ff_destroy() for failures after input_ff_create() succeeds.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90330.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ff21a635dd1a9c6ca378847160897649cdbbfae4
Fixed
a265fee3d24bd611783fd929582b7b6d62000a65
Fixed
360a49fc53acdfe2dbb80c23cfa606ed7e13a85d
Fixed
6bb216586a3cb4ce327511a7c0445fa88e85b3cb
Fixed
2fd9c8112907c14efefe6a90d20b774737052db3
Fixed
13378c9ac0a1bcdf49ba158e4199594aafb589cd
Fixed
dd5be4d9ce2dfc4d4a4527ef7d31d21a78e3cdac

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90330.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.6.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.57
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90330.json"