PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-98945 Linux CVE debrief

A vulnerability in the Linux kernel's HID steam driver has been addressed. During teardown, a narrow window could lead to scheduled callbacks with a dangling pointer to the freed steam struct. Linux kernel maintainers, Linux distribution maintainers, and users of Linux systems with HID steam devices should verify their kernel versions and apply patches or updates to prevent potential use-after-free issues. The fix rearranges the teardown sequence to prevent such issues, ensuring that work canceling for rumble and mode switch is properly handled in steam_unregister.

Vendor
Linux
Product
Unknown
CVSS
HIGH 7.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-23
Original CVE updated
2026-10-26
Advisory published
2026-10-23
Advisory updated
2026-10-26

Who should care

Linux kernel maintainers, Linux distribution maintainers, and users of Linux systems with HID steam devices should verify their kernel versions and apply patches or updates to prevent potential use-after-free issues. This includes reviewing the vulnerability details, assessing exposure based on used Linux kernel versions, and applying patches or updates provided by the Linux kernel maintainers.

Why it matters

A vulnerability in the Linux kernel's HID steam driver has been addressed. Linux kernel maintainers, Linux distribution maintainers, and users of Linux systems with HID steam devices should verify their kernel versions and apply patches or updates to prevent potential use-after-free issues.

  • Verify Linux kernel versions to assess exposure.
  • Apply patches or updates to prevent potential use-after-free issues.

Technical summary

The Linux kernel's HID steam driver had a vulnerability where a narrow window during teardown could lead to scheduled callbacks with a dangling pointer to the freed steam struct. This has been fixed by rearranging the teardown sequence, ensuring that work canceling for rumble and mode switch is properly handled in steam_unregister, thus preventing potential use-after-free issues. The fix is relevant to Linux kernel maintainers, Linux distribution maintainers, and users of Linux systems with HID steam devices, who should verify their kernel versions and apply patches or updates.

Defensive priority

Verify Linux kernel versions and assess exposure based on used versions.

Recommended defensive actions

  • Verify Linux kernel versions in use against affected versions.
  • Assess exposure based on used Linux kernel versions.
  • Apply patches or updates provided by Linux kernel maintainers.
  • Review compensating controls for exposed systems while remediation is scheduled and verified.
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review.
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented.
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record and source item provide details on the vulnerability and its fix in the Linux kernel. The fix addresses a narrow window during teardown where callbacks could still be scheduled with a dangling pointer to the now-freed steam struct. This vulnerability affects Linux kernel maintainers, Linux distribution maintainers, and users of Linux systems with HID steam devices. Evidence is limited to public CVE details and associated source references.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-98945 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-98945

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-98945 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-98945

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • HID: steam: Rearrange teardown sequence

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98945.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/d2587923d50c8b141ce0ccb284c714cf6054d6a7

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/81a8209c09f9be7eef860ca6cc154749a6b4d243

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/86724f4bcf6049c3a322f7a7b1f968210059c46a

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/b5ea938ff776306798d3a11485c2475034f92131

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/ddce9641ce924ed91ec8304577e463823a29ffaf

    Supplemental source

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.