https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 07 Nov 2026 04:34:02 +0000 https://db.gcve.eu/vuln/cve-2026-98502 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>HID: alps: unregister DualPoint Stick input device on remove</p> <p>alps_input_configured() allocates a second input device (&#34;DualPoint Stick&#34;) with input_allocate_device() and registers it, but the alps_driver struct has no .remove handler and input2 is not tracked in hdev-&gt;inputs. The default remove path (hid_hw_stop -&gt; hidinput_disconnect) only iterates hdev-&gt;inputs, so input2 is never unregistered and leaks on every device removal.</p> <p>Add a .remove handler that stops the device first (preventing URB callbacks from touching input2 during teardown) and then unregisters input2.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>HID: alps: unregister DualPoint Stick input device on remove</p> <p>alps_input_configured() allocates a second input device (&#34;DualPoint Stick&#34;) with input_allocate_device() and registers it, but the alps_driver struct has no .remove handler and input2 is not tracked in hdev-&gt;inputs. The default remove path (hid_hw_stop -&gt; hidinput_disconnect) only iterates hdev-&gt;inputs, so input2 is never unregistered and leaks on every device removal.</p> <p>Add a .remove handler that stops the device first (preventing URB callbacks from touching input2 during teardown) and then unregisters input2.</p> https://db.gcve.eu/vuln/cve-2026-98502