CVE-2026-68087

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-68087", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-30T09:28:09.367Z", "datePublished": "2026-08-10T11:51:41.348Z", "dateUpdated": "2026-08-17T04:58:34.892Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-17T04:58:34.892Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()\n\nwacom_wac_queue_flush() is called via the .raw_event callback\n(wacom_raw_event \u2192 wacom_wac_pen_serial_enforce \u2192 wacom_wac_queue_flush).\nFor USB HID devices, this callback is invoked from hid_irq_in(), which\nis a URB completion handler running in atomic context. Using GFP_KERNEL\nin this path can sleep, leading to a \"scheduling while atomic\" bug.\n\nUse GFP_ATOMIC instead. The existing code already handles allocation\nfailure by skipping the fifo entry and continuing."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/hid/wacom_sys.c"], "versions": [{"version": "5e013ad206895e72d7da41bc1ae89d8cb499c3aa", "lessThan": "bbe1e55629bfaabd4b2e8125b48dd3503d74ac8b", "status": "affected", "versionType": "git"}, {"version": "5e013ad206895e72d7da41bc1ae89d8cb499c3aa", "lessThan": "27c4dad1b7917b747bf080792a527997e3147c69", "status": "affected", "versionType": "git"}, {"version": "5e013ad206895e72d7da41bc1ae89d8cb499c3aa", "lessThan": "55f1ad573e34abf9a0443c34bc5a63d74edba7d7", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/hid/wacom_sys.c"], "versions": [{"version": "6.15", "status": "affected"}, {"version": "0", "lessThan": "6.15", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.39", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.4", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "6.18.39"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "7.1.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/bbe1e55629bfaabd4b2e8125b48dd3503d74ac8b"}, {"url": "https://git.kernel.org/stable/c/27c4dad1b7917b747bf080792a527997e3147c69"}, {"url": "https://git.kernel.org/stable/c/55f1ad573e34abf9a0443c34bc5a63d74edba7d7"}], "title": "HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/hid/wacom_sys.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "bbe1e55629bfaabd4b2e8125b48dd3503d74ac8b", "status": "affected", "version": "5e013ad206895e72d7da41bc1ae89d8cb499c3aa", "versionType": "git"}, {"lessThan": "27c4dad1b7917b747bf080792a527997e3147c69", "status": "affected", "version": "5e013ad206895e72d7da41bc1ae89d8cb499c3aa", "versionType": "git"}, {"lessThan": "55f1ad573e34abf9a0443c34bc5a63d74edba7d7", "status": "affected", "version": "5e013ad206895e72d7da41bc1ae89d8cb499c3aa", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/hid/wacom_sys.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.15"}, {"lessThan": "6.15", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.39", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.4", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()\n\nwacom_wac_queue_flush() is called via the .raw_event callback\n(wacom_raw_event \u2192 wacom_wac_pen_serial_enforce \u2192 wacom_wac_queue_flush).\nFor USB HID devices, this callback is invoked from hid_irq_in(), which\nis a URB completion handler running in atomic context. Using GFP_KERNEL\nin this path can sleep, leading to a \"scheduling while atomic\" bug.\n\nUse GFP_ATOMIC instead. The existing code already handles allocation\nfailure by skipping the fifo entry and continuing."}], "id": "CVE-2026-68087", "lastModified": "2026-08-17T05:18:07.870", "metrics": {}, "published": "2026-08-10T12:17:21.340", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/27c4dad1b7917b747bf080792a527997e3147c69"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/55f1ad573e34abf9a0443c34bc5a63d74edba7d7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/bbe1e55629bfaabd4b2e8125b48dd3503d74ac8b"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()", "id": "2513142", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513142"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-663", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nHID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()\nwacom_wac_queue_flush() is called via the .raw_event callback\n(wacom_raw_event \u2192 wacom_wac_pen_serial_enforce \u2192 wacom_wac_queue_flush).\nFor USB HID devices, this callback is invoked from hid_irq_in(), which\nis a URB completion handler running in atomic context. Using GFP_KERNEL\nin this path can sleep, leading to a \"scheduling while atomic\" bug.\nUse GFP_ATOMIC instead. The existing code already handles allocation\nfailure by skipping the fifo entry and continuing.", "A flaw was found in the Linux kernel. Specifically, the Wacom Human Interface Device (HID) driver uses an incorrect memory allocation flag (`GFP_KERNEL`) within a critical section of code that operates in an atomic context. This can cause the system to attempt to sleep, leading to a \"scheduling while atomic\" bug. This vulnerability could result in system instability or a denial of service."], "name": "CVE-2026-68087", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-10T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-68087\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-68087\nhttps://lore.kernel.org/linux-cve-announce/2026081059-CVE-2026-68087-18c0@gregkh/T"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5e013ad206895e72d7da41bc1ae89d8cb499c3aa,bbe1e55629bfaabd4b2e8125b48dd3503d74ac8b)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5e013ad206895e72d7da41bc1ae89d8cb499c3aa,27c4dad1b7917b747bf080792a527997e3147c69)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5e013ad206895e72d7da41bc1ae89d8cb499c3aa,55f1ad573e34abf9a0443c34bc5a63d74edba7d7)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.15"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.15)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.39,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.4,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-10T20:00:03.986637+00:00", "updated": "2026-08-13T10:45:04.006470+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}