CVE-2026-98944

HIGH

MEDIUM Priority: 0.01 BB Relevance: 41/100

Published: 2026-10-23 Modified: 2026-10-30 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local

AC: Low

PR: Low

UI: None

S: Unchanged

C: High

I: High

A: High

Description

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Refactor registration This refactors and simplifies the registration/unregistration flow. Since we now only perform registration when the client isn't opened anymore, the logic for handling that can be removed, and the rest of the function streamlined. We also remove the previous assumption that we have a serial number to show we're registered, replacing it with a single purpose boolean. In a previous refactor the code for unregistering a battery if later registration steps failed was accidentally left out. As a result, a lingering power_supply object could get left over after the steam object was torn down. This is also fixed here.

Affected Software (11)

Vendor	Product	Version
Linux	Linux	385a4886778f6d6e61eff1d4d295af332d7130e1 < 6e44418d3a06f023877959cc6dd7386ec7f64d59
Linux	Linux	385a4886778f6d6e61eff1d4d295af332d7130e1 < bdfad7759fef1a5d8be9bacee3c72ce40f148b63
Linux	Linux	385a4886778f6d6e61eff1d4d295af332d7130e1 < 39568571aee4f5499a6d254812fe4b75dc3d4ace
Linux	Linux	385a4886778f6d6e61eff1d4d295af332d7130e1 < 3c2f97343d4df2a75747f4c79effa0587509888f
Linux	Linux	385a4886778f6d6e61eff1d4d295af332d7130e1 < 2b15e10aff95c78dbacc4fa32fa90c9098213e03
Linux	Linux	385a4886778f6d6e61eff1d4d295af332d7130e1 < cf71a6ee1d4e36b8e65b81c064e2797a10247280
Linux	Linux	385a4886778f6d6e61eff1d4d295af332d7130e1 < c06cf54fe99b8c6bcf2017bb076c0e3918608cea
Linux	Linux	385a4886778f6d6e61eff1d4d295af332d7130e1 < 6f9b740c31ba7e061b2ebb330d9a3d63f1358f29
Linux	Linux	fb87a92b43961c89bf4a115d8a700885d8959cb1
Linux	Linux	4.19.6 < 4.20
Linux	Linux	4.20