一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月18日

CVE-2026-90197 – In the Linux kernel, the following vulnerability has been resolved: HID: haptic: don’t wr

未分类
📑 文章目录

In the Linux kernel, the following vulnerability has been resolved:

HID: haptic: don’t write an uninitialized value to unhandled usages

fill_effect_buf() initializes value only for the four haptic usages
handled by its switch, but writes it to field->value[] for every usage.
An unhandled usage can therefore receive either an uninitialized value
or one left over from the previous usage. hid_output_report() then
serializes that value into the effect’s report buffer.

Skip unhandled usages instead. This also matches switch_mode(), which
only updates fields it recognizes.

Found with Clang’s -Wconditional-uninitialized.