CVE-2026-98945High· 7.8▾ TwilightIn the Linux kernel, the following vulnerability has been resolved: HID: steam: Rearrange teardown sequence This fixes a narrow window during the teardown sequence where callbacks could still be scheduled during cleanup that would then…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 24.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
— → 7.8
none → high
Last analysed / modified upstream
In the Linux kernel, the following vulnerability has been resolved:
HID: steam: Rearrange teardown sequence
This fixes a narrow window during the teardown sequence where callbacks could still be scheduled during cleanup that would then have a dangling pointer to the now-freed steam struct.
This also puts work canceling for rumble and mode switch in steam_unregister, as that shouldn't persist while the client hdev is open.
Linux >= 9cd61c8179781344315c2a9816977ea415c5459e < d2587923d50c8b141ce0ccb284c714cf6054d6a7Linux >= 9cd61c8179781344315c2a9816977ea415c5459e < 81a8209c09f9be7eef860ca6cc154749a6b4d243Linux >= 9cd61c8179781344315c2a9816977ea415c5459e < 86724f4bcf6049c3a322f7a7b1f968210059c46aLinux >= 9cd61c8179781344315c2a9816977ea415c5459e < b5ea938ff776306798d3a11485c2475034f92131Linux >= 9cd61c8179781344315c2a9816977ea415c5459e < ddce9641ce924ed91ec8304577e463823a29ffafLinux 6.3Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2024-38564High· 7.8bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
CVE-2026-99092Noneriscv: patch: fix handling of bpf-jit execmem addresses
CVE-2026-99089NoneASoC: samsung: i2s: enable op_clk in probe to balance runtime PM
CVE-2026-99093Nonemm: don't schedule deferred kernel page table freeing while booting
CVE-2026-99088Nonenet: openvswitch: validate transport header presence in set_ipv6_addr
CVE-2026-99090Nonedrm/amdgpu: serialize vblank counter reads against GPU reset