CVE-2025-38253

In the Linux kernel, the following vulnerability has been resolved:

HID: wacom: fix crash in wacom_aes_battery_handler()

Commit fd2a9b29dc9c ("HID: wacom: Remove AES power_supply after extended inactivity") introduced wacom_aes_battery_handler() which is scheduled as a delayed work (aes_battery_work).

In wacom_remove(), aes_battery_work is not canceled. Consequently, if the device is removed while aes_battery_work is still pending, then hard crashes or "Oops: general protection fault..." are experienced when wacom_aes_battery_handler() is finally called. E.g., this happens with built-in USB devices after resume from hibernate when aes_battery_work was still pending at the time of hibernation.

So, take care to cancel aes_battery_work in wacom_remove().

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires local access with physical Wacom input hardware attached (or the capability to emulate such devices), resulting strictly in a local denial of service via a kernel panic. Typical enterprise server deployments do not attach graphic tablets or digitizers, leaving standard production environments unexposed. The crash condition only occurs under specific circumstances when a delayed battery monitoring routine runs after device disconnect or hibernation resume.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.