Live › vulnerability › CVE-2026-98945
Go to dashboardThe Linux kernel's Steam controller HID driver could schedule callbacks during teardown that then pointed at already-freed memory. The fix reorders cleanup and cancels rumble and mode-switch work during unregistration.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
HID: steam: Rearrange teardown sequence
This fixes a narrow window during the teardown sequence where callbacks could still be scheduled during cleanup that would then have a dangling pointer to the now-freed steam struct.
This also puts work canceling for rumble and mode switch in steam_unregister, as that shouldn't persist while the client hdev is open.
This page as .md · .json · in your agent: get_signal("CVE-2026-98945")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.