CVE-2026-68360

Summary

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop

Calling hid_hw_stop() does not stop the device IO. This results in a race condition between hid_input_report() and the point immediately following the execution of hid_device_io_start() within the driver probe function. If the probe operation fails after "io start" has been initiated, this race condition will result in a UAF vulnerability.

Fix the problem by calling hid_device_io_stop() before calling hid_hw_stop().

Affected Software

VendorProductVersion RangeStatus
LinuxLinux40c3a445422579db8ad96c234dbe6c0ab3f6b936 < 0975c42ed2a3bf32125a920e5d19194289126210affected
LinuxLinux40c3a445422579db8ad96c234dbe6c0ab3f6b936 < c7757db58957ac20cdec6ce575dbd44a6375664eaffected
LinuxLinux40c3a445422579db8ad96c234dbe6c0ab3f6b936 < 56d2deb6448378118dbe68c4fbb3fbae5f65b18caffected
LinuxLinux40c3a445422579db8ad96c234dbe6c0ab3f6b936 < 1a634f464d6153dfa4d7e73a3d78236b65a64ee9affected
LinuxLinux40c3a445422579db8ad96c234dbe6c0ab3f6b936 < 94c87871b051d7ad758828a805215a2ec194512aaffected
LinuxLinux5.9affected
LinuxLinux0 < 5.9unaffected
LinuxLinux6.6.148 <= 6.6.*unaffected
LinuxLinux6.12.101 <= 6.12.*unaffected
LinuxLinux6.18.42 <= 6.18.*unaffected
LinuxLinux7.1.6 <= 7.1.*unaffected
LinuxLinux7.2-rc5 <= *unaffected

Weaknesses

References