HID: steam: Refactor registration
Summary
| CVE | CVE-2026-98944 |
|---|---|
| State | PUBLISHED |
| Assigner | Linux |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-10-23 13:17:15 UTC |
| Updated | 2026-10-26 07:17:18 UTC |
| Description | In the Linux kernel, the following vulnerability has been resolved: HID: steam: Refactor registration This refactors and simplifies the registration/unregistration flow. Since we now only perform registration when the client isn't opened anymore, the logic for handling that can be removed, and the rest of the function streamlined. We also remove the previous assumption that we have a serial number to show we're registered, replacing it with a single purpose boolean. In a previous refactor the code for unregistering a battery if later registration steps failed was accidentally left out. As a result, a lingering power_supply object could get left over after the steam object was torn down. This is also fixed here. |
Risk And Classification
Primary CVSS: v3.1 7.8 HIGH from 416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | Secondary | 7.8 | HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | CNA | DECLARED | 7.8 | HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
CVSS v3.1 Breakdown
Attack Vector
LocalAttack Complexity
LowPrivileges Required
LowUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Linux | Linux | affected 385a4886778f6d6e61eff1d4d295af332d7130e1 3c2f97343d4df2a75747f4c79effa0587509888f git | Not specified |
| CNA | Linux | Linux | affected 385a4886778f6d6e61eff1d4d295af332d7130e1 2b15e10aff95c78dbacc4fa32fa90c9098213e03 git | Not specified |
| CNA | Linux | Linux | affected 385a4886778f6d6e61eff1d4d295af332d7130e1 cf71a6ee1d4e36b8e65b81c064e2797a10247280 git | Not specified |
| CNA | Linux | Linux | affected 385a4886778f6d6e61eff1d4d295af332d7130e1 c06cf54fe99b8c6bcf2017bb076c0e3918608cea git | Not specified |
| CNA | Linux | Linux | affected 385a4886778f6d6e61eff1d4d295af332d7130e1 6f9b740c31ba7e061b2ebb330d9a3d63f1358f29 git | Not specified |
| CNA | Linux | Linux | affected fb87a92b43961c89bf4a115d8a700885d8959cb1 git | Not specified |
| CNA | Linux | Linux | affected 4.19.6 4.20 semver | Not specified |
| CNA | Linux | Linux | affected 4.20 | Not specified |
| CNA | Linux | Linux | unaffected 4.20 semver | Not specified |
| CNA | Linux | Linux | unaffected 6.6.160 6.6.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.12.113 6.12.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.18.57 6.18.* semver | Not specified |
| CNA | Linux | Linux | unaffected 7.2.11 7.2.* semver | Not specified |
| CNA | Linux | Linux | unaffected 7.3 * original_commit_for_fix | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| git.kernel.org/stable/c/3c2f97343d4df2a75747f4c79effa0587509888f | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/c06cf54fe99b8c6bcf2017bb076c0e3918608cea | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/cf71a6ee1d4e36b8e65b81c064e2797a10247280 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/6f9b740c31ba7e061b2ebb330d9a3d63f1358f29 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| git.kernel.org/stable/c/2b15e10aff95c78dbacc4fa32fa90c9098213e03 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.