Type Confusion Vulnerability in Linux Kernel's ati_remote2 Driver

CVE-2026-99069

What is CVE-2026-99069?

A type confusion vulnerability has been identified in the ati_remote2 driver of the Linux kernel, which affects the management of device attributes. When modifications were made to transition the management of channel_mask and mode_mask attributes to the driver core, the corresponding callbacks were not properly updated. This oversight allowed the wrong device pointer to be invoked, leading to potential errors in handling USB devices, thus raising concerns about system stability and integrity.

References