CVE-2026-68087
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
10/08/2026
Last modified:
17/08/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()<br />
<br />
wacom_wac_queue_flush() is called via the .raw_event callback<br />
(wacom_raw_event → wacom_wac_pen_serial_enforce → wacom_wac_queue_flush).<br />
For USB HID devices, this callback is invoked from hid_irq_in(), which<br />
is a URB completion handler running in atomic context. Using GFP_KERNEL<br />
in this path can sleep, leading to a "scheduling while atomic" bug.<br />
<br />
Use GFP_ATOMIC instead. The existing code already handles allocation<br />
failure by skipping the fifo entry and continuing.