An improper resource release vulnerability in the Linux kernel Wacom HID driver exposes the system to potential compromise and service disruption.

This vulnerability occurs in the wacom_parse_and_register function, which fails to stop HID hardware when initialization steps like LED or remote setup fail. An unauthenticated attacker with adjacent network access can exploit this state mismatch to trigger resource management errors.

The vulnerability carries a CVSS score of 8.8, indicating a high potential for impact on confidentiality, integrity, and availability. Successful exploitation could lead to system crashes or privilege escalation, potentially disrupting critical business operations and exposing sensitive data residing in kernel memory.

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later, as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for repeated HID driver initialization errors or unexpected kernel panic events that might indicate exploitation attempts.

Compensating Controls: Restrict physical or adjacent network access to systems utilizing Wacom hardware to mitigate the attack vector.

Public Exploit Available: Unknown

Given the high CVSS severity and the potential for kernel-level impact, organizations should prioritize patching affected Linux kernels. Administrators must verify their kernel version and apply the upstream stable patches or vendor-provided updates immediately to ensure system stability and security.