All vulnerabilities
CVE-2026-98944

Linux: HID: steam: Refactor registration

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in3c2f97343d4df2a75747f4c79effa0587509888fAlso 2b15e10aff95c78dbacc4fa32fa90c9098213e03, 6f9b740c31ba7e061b2ebb330d9a3d63f1358f29 and 4 moreCVE List
Published23 Oct 2026Updated 23 Oct 2026CVE List

What fixes it

Show all 7 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: steam: Refactor registration

This refactors and simplifies the registration/unregistration flow. Since we now only perform registration when the client isn't opened anymore, the logic for handling that can be removed, and the rest of the function streamlined.

We also remove the previous assumption that we have a serial number to show we're registered, replacing it with a single purpose boolean.

In a previous refactor the code for unregistering a battery if later registration steps failed was accidentally left out. As a result, a lingering power_supply object could get left over after the steam object was torn down. This is also fixed here.

Text from CVE List

Affected versions 14

  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 3c2f97343d4df2a75747f4c79effa0587509888fCVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 2b15e10aff95c78dbacc4fa32fa90c9098213e03CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before cf71a6ee1d4e36b8e65b81c064e2797a10247280CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c06cf54fe99b8c6bcf2017bb076c0e3918608ceaCVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6f9b740c31ba7e061b2ebb330d9a3d63f1358f29CVE List
  • Linuxaffected: all versions before 6.6.160CVE List
  • Linuxaffected: all versions before 6.12.113CVE List
  • Linuxaffected: all versions before 6.18.57CVE List
  • Linuxaffected: all versions before 7.2.11CVE List
  • Linuxunaffected: 6.6.160 through 6.6.*CVE List
  • Linuxunaffected: 6.12.113 through 6.12.*CVE List
  • Linuxunaffected: 6.18.57 through 6.18.*CVE List
  • Linuxunaffected: 7.2.11 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 5