CVE-2026-68087
kernel: HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 10, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel. Specifically, the Wacom Human Interface Device (HID) driver uses an incorrect memory allocation flag (GFP_KERNEL) within a critical section of code that operates in an atomic context. This can cause the system to attempt to sleep, leading to a "scheduling while atomic" bug. This vulnerability could result in system instability or a denial of service.
Statement
This vulnerability is rated as Low severity because exploitation requires local access and the presence of specialized Wacom hardware or an emulated USB device. In typical Red Hat Enterprise Linux server deployments, graphics tablet peripherals are not connected, significantly limiting exposure under default configurations. The flaw is confined to causing a kernel crash or system hang without compromising data confidentiality or system integrity.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-663 · Use of a Non-reentrant Function in a Concurrent Context