Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-68087

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
10/08/2026
Última modificación:
17/08/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()<br /> <br /> wacom_wac_queue_flush() is called via the .raw_event callback<br /> (wacom_raw_event → wacom_wac_pen_serial_enforce → wacom_wac_queue_flush).<br /> For USB HID devices, this callback is invoked from hid_irq_in(), which<br /> is a URB completion handler running in atomic context. Using GFP_KERNEL<br /> in this path can sleep, leading to a "scheduling while atomic" bug.<br /> <br /> Use GFP_ATOMIC instead. The existing code already handles allocation<br /> failure by skipping the fifo entry and continuing.

Impacto