{"id":"CVE-2026-98943","title":"HID: steam: Clean up locking","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: steam: Clean up locking\n\nThis cleans up several issues with locking behavior, including RCU accesses\nnot being guarded behind a lock.","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < cbf9961602ffb34d6902bbe9a247c54e13361265","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 6bce4b221dc0e144180c333123dbb82d1dc3a500","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < d1e095c75d12799a1cd855a399f88c89147c1eca","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 6c714d6691515fa3d38eb770b484a0046593ccc9","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < de1d341b9b3ec9655f31fb8b44f784cca5e670ad","Linux < 6.6.160","Linux < 6.12.113","Linux < 6.18.57","Linux < 7.2.11","Linux (all versions)"],"published":"2026-10-23","updated":"2026-10-23","sourceUpdated":"2026-10-23T12:19:01.620Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98943","references":[{"url":"https://git.kernel.org/stable/c/cbf9961602ffb34d6902bbe9a247c54e13361265"},{"url":"https://git.kernel.org/stable/c/6bce4b221dc0e144180c333123dbb82d1dc3a500"},{"url":"https://git.kernel.org/stable/c/d1e095c75d12799a1cd855a399f88c89147c1eca"},{"url":"https://git.kernel.org/stable/c/6c714d6691515fa3d38eb770b484a0046593ccc9"},{"url":"https://git.kernel.org/stable/c/de1d341b9b3ec9655f31fb8b44f784cca5e670ad"}],"tags":["cve.org"],"ingestedAt":"2026-10-23T13:24:55.561Z","slug":"CVE-2026-98943","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nHID: steam: Clean up locking\n\nThis cleans up several issues with locking behavior, including RCU accesses\nnot being guarded behind a lock.\n\n## Affected\n\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < cbf9961602ffb34d6902bbe9a247c54e13361265`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 6bce4b221dc0e144180c333123dbb82d1dc3a500`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < d1e095c75d12799a1cd855a399f88c89147c1eca`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 6c714d6691515fa3d38eb770b484a0046593ccc9`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < de1d341b9b3ec9655f31fb8b44f784cca5e670ad`\n- `Linux < 6.6.160`\n- `Linux < 6.12.113`\n- `Linux < 6.18.57`\n- `Linux < 7.2.11`\n- `Linux (all versions)`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}