In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacom_parse_and_register() starts HID hardware before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error paths currently release Wacom resources without stopping the HID hardware. Route post-hid_hw_start() failures through hid_hw_stop() before releasing driver resources. This issue was identified during our ongoing static-analysis research while reviewing kernel code.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - HID: wacom: stop hardware after post-start probe failures wacom_parse_and_register() starts HID hardware     before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error     paths currently release Wacom resources without stopping the HID hardware. Route post-hid_hw_start()     failures through hid_hw_stop() before releasing driver resources. This issue was identified during our     ongoing static-analysis research while reviewing kernel code. (CVE-2026-68091)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Type	Severity
337224	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2026-129 (ALASKERNEL-5.10-2026-129)	Nessus	Amazon Linux Local Security Checks	Local	medium
334508	Linux Distros Unpatched Vulnerability : CVE-2026-68091	Nessus	Misc.	Local	high
332499	Photon OS 5.0: Linux PHSA-2026-5.0-92-0928	Nessus	PhotonOS Local Security Checks	Local	high

Detections

Analytics

CVE-2026-68091

high

Tenable Plugins

medium

high

high