https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 07 Nov 2026 04:23:41 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-1375 certfr-2026-avi-1375 https://db.gcve.eu/vuln/certfr-2026-avi-1375 https://db.gcve.eu/vuln/fkie_cve-2026-98502 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>HID: alps: unregister DualPoint Stick input device on remove</p> <p>alps_input_configured() allocates a second input device (&#34;DualPoint Stick&#34;) with input_allocate_device() and registers it, but the alps_driver struct has no .remove handler and input2 is not tracked in hdev-&gt;inputs. The default remove path (hid_hw_stop -&gt; hidinput_disconnect) only iterates hdev-&gt;inputs, so input2 is never unregistered and leaks on every device removal.</p> <p>Add a .remove handler that stops the device first (preventing URB callbacks from touching input2 during teardown) and then unregisters input2.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>HID: alps: unregister DualPoint Stick input device on remove</p> <p>alps_input_configured() allocates a second input device (&#34;DualPoint Stick&#34;) with input_allocate_device() and registers it, but the alps_driver struct has no .remove handler and input2 is not tracked in hdev-&gt;inputs. The default remove path (hid_hw_stop -&gt; hidinput_disconnect) only iterates hdev-&gt;inputs, so input2 is never unregistered and leaks on every device removal.</p> <p>Add a .remove handler that stops the device first (preventing URB callbacks from touching input2 during teardown) and then unregisters input2.</p> https://db.gcve.eu/vuln/fkie_cve-2026-98502 https://db.gcve.eu/vuln/ghsa-79qw-7wgp-r9xr <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>HID: alps: unregister DualPoint Stick input device on remove</p> <p>alps_input_configured() allocates a second input device (&#34;DualPoint Stick&#34;) with input_allocate_device() and registers it, but the alps_driver struct has no .remove handler and input2 is not tracked in hdev-&gt;inputs. The default remove path (hid_hw_stop -&gt; hidinput_disconnect) only iterates hdev-&gt;inputs, so input2 is never unregistered and leaks on every device removal.</p> <p>Add a .remove handler that stops the device first (preventing URB callbacks from touching input2 during teardown) and then unregisters input2.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>HID: alps: unregister DualPoint Stick input device on remove</p> <p>alps_input_configured() allocates a second input device (&#34;DualPoint Stick&#34;) with input_allocate_device() and registers it, but the alps_driver struct has no .remove handler and input2 is not tracked in hdev-&gt;inputs. The default remove path (hid_hw_stop -&gt; hidinput_disconnect) only iterates hdev-&gt;inputs, so input2 is never unregistered and leaks on every device removal.</p> <p>Add a .remove handler that stops the device first (preventing URB callbacks from touching input2 during teardown) and then unregisters input2.</p> https://db.gcve.eu/vuln/ghsa-79qw-7wgp-r9xr https://db.gcve.eu/vuln/msrc_cve-2026-98502 msrc_CVE-2026-98502 https://db.gcve.eu/vuln/msrc_cve-2026-98502 https://db.gcve.eu/vuln/suse-su-2026:24550-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://db.gcve.eu/vuln/suse-su-2026:24550-1 https://db.gcve.eu/vuln/ubuntu-cve-2026-98502 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:16.04:LTS: linux-hwe-edge and 247 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: HID: alps: unregister DualPoint Stick input device on remove alps_input_configured() allocates a second input device (&#34;DualPoint Stick&#34;) with input_allocate_device() and registers it, but the alps_driver struct has no .remove handler and input2 is not tracked in hdev-&gt;inputs. The default remove path (hid_hw_stop -&gt; hidinput_disconnect) only iterates hdev-&gt;inputs, so input2 is never unregistered and leaks on every device removal. Add a .remove handler that stops the device first (preventing URB callbacks from touching input2 during teardown) and then unregisters input2.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure, Ubuntu:Pro:16.04:LTS: linux-gcp, Ubuntu:Pro:16.04:LTS: linux-hwe, Ubuntu:16.04:LTS: linux-hwe-edge and 247 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: HID: alps: unregister DualPoint Stick input device on remove alps_input_configured() allocates a second input device (&#34;DualPoint Stick&#34;) with input_allocate_device() and registers it, but the alps_driver struct has no .remove handler and input2 is not tracked in hdev-&gt;inputs. The default remove path (hid_hw_stop -&gt; hidinput_disconnect) only iterates hdev-&gt;inputs, so input2 is never unregistered and leaks on every device removal. Add a .remove handler that stops the device first (preventing URB callbacks from touching input2 during teardown) and then unregisters input2.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-98502