Unrated severityNVD Advisory· Published Sep 17, 2026· Updated Oct 30, 2026
CVE-2026-90330
CVE-2026-90330
Description
In the Linux kernel, the following vulnerability has been resolved:
HID: logitech-hidpp: Fix FF device cleanup on init failure
hidpp_ff_init() creates the input force-feedback device with input_ff_create(), then allocates the HID++ FF private data, effect ID array, and workqueue.
If any of those allocations fail after input_ff_create() succeeds, the function returns an error without destroying the FF device. Add an unwind path that frees the private allocations made by hidpp_ff_init() and calls input_ff_destroy() for failures after input_ff_create() succeeds.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- osv-coords2 versions
>= 4.6.0, < 6.1.191+ 1 more
- (no CPE)range: >= 4.6.0, < 6.1.191
- (no CPE)range: < 7.2.7-1.1
Patches
Vulnerability mechanics
References
6- git.kernel.org/stable/c/13378c9ac0a1bcdf49ba158e4199594aafb589cdnvd
- git.kernel.org/stable/c/2fd9c8112907c14efefe6a90d20b774737052db3nvd
- git.kernel.org/stable/c/360a49fc53acdfe2dbb80c23cfa606ed7e13a85dnvd
- git.kernel.org/stable/c/6bb216586a3cb4ce327511a7c0445fa88e85b3cbnvd
- git.kernel.org/stable/c/a265fee3d24bd611783fd929582b7b6d62000a65nvd
- git.kernel.org/stable/c/dd5be4d9ce2dfc4d4a4527ef7d31d21a78e3cdacnvd
News mentions
0No linked articles in our index yet.