CVE-2026-98944High· 7.8▾ TwilightIn the Linux kernel, the following vulnerability has been resolved: HID: steam: Refactor registration This refactors and simplifies the registration/unregistration flow. Since we now only perform registration when the client isn't open…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 24.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
— → 7.8
none → high
Last analysed / modified upstream
In the Linux kernel, the following vulnerability has been resolved:
HID: steam: Refactor registration
This refactors and simplifies the registration/unregistration flow. Since we now only perform registration when the client isn't opened anymore, the logic for handling that can be removed, and the rest of the function streamlined.
We also remove the previous assumption that we have a serial number to show we're registered, replacing it with a single purpose boolean.
In a previous refactor the code for unregistering a battery if later registration steps failed was accidentally left out. As a result, a lingering power_supply object could get left over after the steam object was torn down. This is also fixed here.
Linux >= 385a4886778f6d6e61eff1d4d295af332d7130e1 < 3c2f97343d4df2a75747f4c79effa0587509888fLinux >= 385a4886778f6d6e61eff1d4d295af332d7130e1 < 2b15e10aff95c78dbacc4fa32fa90c9098213e03Linux >= 385a4886778f6d6e61eff1d4d295af332d7130e1 < cf71a6ee1d4e36b8e65b81c064e2797a10247280Linux >= 385a4886778f6d6e61eff1d4d295af332d7130e1 < c06cf54fe99b8c6bcf2017bb076c0e3918608ceaLinux >= 385a4886778f6d6e61eff1d4d295af332d7130e1 < 6f9b740c31ba7e061b2ebb330d9a3d63f1358f29Linux fb87a92b43961c89bf4a115d8a700885d8959cb1Linux >= 4.19.6 < 4.20Linux 4.20Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99118Nonedrm/i915/dmc: Harden DMC firmware payload parsing
CVE-2026-99117Nonenet: bridge: mcast: don't truncate the port group walk on teardown
CVE-2026-99121Noneipv4: avoid divide by zero in fib_rebalance
CVE-2026-99120NoneKVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes
CVE-2026-99119Nonedrm/amdgpu/userq: actually validate userq BOs
CVE-2026-99123Nonevsock/virtio: validate packet source for connected sockets