High severity · published Oct 23, 2026
CVE-2026-98944
HID: steam: Refactor registration
New
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved: HID: steam: Refactor registration This refactors and simplifies the registration/unregistration flow. Since we now only perform registration when the client isn't opened anymore, the logic for handling that can be removed, and the rest of the function streamlined. We also remove the previous assumption that we have a serial number to show we're registered, replacing it with a single purpose boolean. In a previous refactor the code for unregistering a battery if later registration steps failed was accidentally left out. As a result, a lingering power_supply object could get left over after the steam object was torn down. This is also fixed here.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 7% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Linux
385a4886778f6d6e61eff1d4d295af332d7130e1 before 3c2f97343d4df2a75747f4c79effa0587509888f; 385a4886778f6d6e61eff1d4d295af332d7130e1 before 2b15e10aff95c78dbacc4fa32fa90c9098213e03; 385a4886778f6d6e61eff1d4d295af332d7130e1 before cf71a6ee1d4e36b8e65b81c064e2797a10247280; 385a4886778f6d6e61eff1d4d295af332d7130e1 before c06cf54fe99b8c6bcf2017bb076c0e3918608cea; 385a4886778f6d6e61eff1d4d295af332d7130e1 before 6f9b740c31ba7e061b2ebb330d9a3d63f1358f29; fb87a92b43961c89bf4a115d8a700885d8959cb1; +2 more · source: vendor