CVE-2026-98945 (CVSS 7.8)

Description

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Rearrange teardown sequence This fixes a narrow window during the teardown sequence where callbacks could still be scheduled during cleanup that would then have a dangling pointer to the now-freed steam struct. This also puts work canceling for rumble and mode switch in steam_unregister, as that shouldn't persist while the client hdev is open.

Is your site exposed to CVE-2026-98945?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploit Prediction

0.0016

Probability of exploitation

0.06%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/81a8209c09f9be7eef860ca6cc154749a6b4d243 https://git.kernel.org/stable/c/86724f4bcf6049c3a322f7a7b1f968210059c46a https://git.kernel.org/stable/c/b5ea938ff776306798d3a11485c2475034f92131 https://git.kernel.org/stable/c/d2587923d50c8b141ce0ccb284c714cf6054d6a7 https://git.kernel.org/stable/c/ddce9641ce924ed91ec8304577e463823a29ffaf

Frequently Asked Questions

What is CVE-2026-98945? +

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Rearrange teardown sequence This fixes a narrow window during the teardown sequence where callbacks could still be scheduled during cleanup that would then have a dangling pointer to the now-freed steam struct. This also puts work canceling for rumble and mode switch in steam_unregister, as that shouldn't persist while the client hdev is open. It has a CVSS v3.1 base score of 7.8 (HIGH).

How severe is CVE-2026-98945? +

CVE-2026-98945 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0016, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-98945? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

CVE-2026-98945