CVE-2026-68087
In the Linux kernel, the following vulnerability has been resolved: HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush() wacom_wac_queue_flush() is called via the .raw_event callback (wacom_raw_event → wacom_wac_pen_serial_enforce → wacom_wac_queue_flush). For USB HID devices, this callback is invoked from hid_irq_in(), which is a URB completion handler running in atomic context. Using GFP_KERNEL in this path can sleep, leading to a "scheduling while atomic" bug. Use GFP_ATOMIC instead. The existing code already handles allocation failure by skipping the fifo entry and continuing.
Affected versions
Linux kernel versions
6.15
and later are affected. Fixed in
6.18.39,
7.1.4,
7.2
and their respective stable series.
References
3 totalFrequently asked questions
-
What is CVE-2026-68087?
CVE-2026-68087 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.15 onward and has been patched in 6.18.39, 7.1.4 and 7.2. CVE-2026-68087 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-68087?
Yes. CVE-2026-68087 has been patched. Fixed versions include 6.18.39, 7.1.4 and 7.2. If you are running Linux kernel 6.15 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-68087 actively exploited?
No. CVE-2026-68087 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.