Threats tagged 'ghsa-qh4f-62fc-9qxv'

CVE-2026-90041 is a high-severity vulnerability in the Linux kernel's Sony HID driver. It involves improper cleanup of the device list on probe failure, leading to use-after-free conditions when the driver attempts to traverse freed memory. This flaw occurs because the sony_input_configured() function adds controllers to a device list before input devices are fully registered, and failures in input_register_device() can leave stale list nodes. The issue has been fixed by improving list node initialization, making list removal idempotent, and ensuring cleanup runs on all probe failure paths.