---
id: CVE-2026-98502
title: 'HID: alps: unregister DualPoint Stick input device on remove'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  HID: alps: unregister DualPoint Stick input device on remove

  alps_input_configured() allocates a second input device ("DualPoint
  Stick") with input_allocate_device() a…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 2562756dde550901c224e3805102bdfc17e7d13a <
    1170ebfba562b3938ff7749b2e42e4420f19436d
  - >-
    Linux >= 2562756dde550901c224e3805102bdfc17e7d13a <
    aa4845a710ae9fee6a3831f5c338904cea77c3aa
  - >-
    Linux >= 2562756dde550901c224e3805102bdfc17e7d13a <
    978e801750c7b0859e87eae619f7d88fcd88333e
  - >-
    Linux >= 2562756dde550901c224e3805102bdfc17e7d13a <
    aa9dde93e05a837645fdfd577eea71f0733f0694
  - Linux 4.8
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T15:16:51.221Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98502'
references:
  - url: 'https://git.kernel.org/stable/c/1170ebfba562b3938ff7749b2e42e4420f19436d'
  - url: 'https://git.kernel.org/stable/c/aa4845a710ae9fee6a3831f5c338904cea77c3aa'
  - url: 'https://git.kernel.org/stable/c/978e801750c7b0859e87eae619f7d88fcd88333e'
  - url: 'https://git.kernel.org/stable/c/aa9dde93e05a837645fdfd577eea71f0733f0694'
tags:
  - cve.org
ingestedAt: '2026-10-18T15:45:12.288Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

HID: alps: unregister DualPoint Stick input device on remove

alps_input_configured() allocates a second input device ("DualPoint
Stick") with input_allocate_device() and registers it, but the
alps_driver struct has no .remove handler and input2 is not tracked in
hdev->inputs.  The default remove path (hid_hw_stop -> hidinput_disconnect)
only iterates hdev->inputs, so input2 is never unregistered and leaks
on every device removal.

Add a .remove handler that stops the device first (preventing URB
callbacks from touching input2 during teardown) and then unregisters
input2.

## Affected

- `Linux >= 2562756dde550901c224e3805102bdfc17e7d13a < 1170ebfba562b3938ff7749b2e42e4420f19436d`
- `Linux >= 2562756dde550901c224e3805102bdfc17e7d13a < aa4845a710ae9fee6a3831f5c338904cea77c3aa`
- `Linux >= 2562756dde550901c224e3805102bdfc17e7d13a < 978e801750c7b0859e87eae619f7d88fcd88333e`
- `Linux >= 2562756dde550901c224e3805102bdfc17e7d13a < aa9dde93e05a837645fdfd577eea71f0733f0694`
- `Linux 4.8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.