CVE record · CVE-2026-93189

HID: core: quiesce input in hid_hw_stop() to prevent use-after-free

CVSS 8.8 HighEPSS 0.0032 · 25th percentile

Published by the CVE Program (CNA: Linux) at 17 Sept 2026, 16:12 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Linux	Linux	affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0744cb9520aade37e78f69134f3111086158f1d2 git affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c876c437d188911685d8bed645416f2e86bd0354 git affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6787f1828f5616f17250e108c0031fb96fd2cfe6 git affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 92cca302a4eaf65d1b38b3fb600b4ee5eb856a51 git affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 02246d8b462fd9bd90bc7ae7d6cab1acf69bcb87 git affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 544ebb25bd58f67e821573412ab7a982b9e02211 git affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0fecd89f979a8653b9a5b0816570329b7a94a081 git affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a4bc41504690b7d7064931909874f5b98cd148b6 git affected before 5.10.270 semver affected before 5.15.221 semver affected before 6.1.188 semver affected before 6.6.157 semver and 3 more Other versions: unaffected
Linux	Linux	unaffected 5.10.270 to 5.10., inclusive semver unaffected 5.15.221 to 5.15., inclusive semver unaffected 6.1.188 to 6.1., inclusive semver unaffected 6.6.157 to 6.6., inclusive semver unaffected 6.12.110 to 6.12., inclusive semver unaffected 6.18.52 to 6.18., inclusive semver unaffected 7.2.6 to 7.2., inclusive semver unaffected 7.3 to , inclusive original_commit_for_fix Other versions: affected

Identifiers: CVE-2026-93189
CNA: Linux
Tags: Linux kernel
Published: 17 Sept 2026
Updated: 19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
8.8	High	3.1	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CNA (Linux)

CISA KEV Not listed.
EPSS 0.0032, the 25th percentile, on 13 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 17 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.